iDEFENSE Security Advisory 12.16.04: MPlayer Bitmap Parsing Remote Heap Overflow Vulnerability

MPlayer Bitmap Parsing Remote Heap Overflow Vulnerability iDEFENSE Security Advisory 12.16.04 http://www.idefense.com/application/poi/display?id=168 December 16, 2004 I. BACKGROUND MPlayer is a movie player for Linux that also runs on many other Unices, and non- x86 CPUs. It plays most MPEG, VOB,...

Multiple Vendor - TCP Session Acknowledgement Number Denial of Service

// source: https://www.securityfocus.com/bid/13215/info Multiple Vendor TCP/IP stack implementations are reported prone to a denial of service vulnerability. A report indicates that the vulnerability manifests when an erroneous TCP acknowledgement number is encountered in an active TCP session...

CVE-2004-1618

Vypress Tonecast 1.3 and earlier allows remote attackers to cause a denial of service application crash via a malformed mp2 stream...

Vypress Tonecast 1.3 - Remote Denial of Service

Vypress Tonecast 1.3 - Remote Denial of Service source: https://www.securityfocus.com/bid/11462/info Vypress Tonecast is reported prone to a remote denial of service vulnerability. It is reported that, when handled, a sufficiently malformed audio stream will cause the affected software to crash. ...

Vypress Tonecast 1.3 - Remote Denial of Service

source: https://www.securityfocus.com/bid/11462/info Vypress Tonecast is reported prone to a remote denial of service vulnerability. It is reported that, when handled, a sufficiently malformed audio stream will cause the affected software to crash. An attacker may exploit this condition to deny...

GLSA-200405-24 : MPlayer, xine-lib: vulnerabilities in RTSP stream handling

The remote host is affected by the vulnerability described in GLSA-200405-24 MPlayer, xine-lib: vulnerabilities in RTSP stream handling Multiple vulnerabilities have been found and fixed in the RTSP handling code common to recent versions of these two packages. These vulnerabilities include sever...

SSH < 1.2.25 CBC/CFB Data Stream Injection

Binary data 1978.prm...

MPlayer, xine-lib: vulnerabilities in RTSP stream handling

Background MPlayer is a movie player capable of handling multiple multimedia file formats. xine-lib is a multimedia player library used by several graphical user interfaces, including xine-ui. They both use the same code to handle Real-Time Streaming Protocol RTSP streams from RealNetworks server...

xine-lib update

New xine-lib packages are available for Slackware 9.1 and -current to fix a security issue where playing a specially crafted Real RTSP stream could run malicious code as the user playing the stream. More details about this issue may be found in this advisory:...

Roger Wilco Server 1.4.1 - Unauthorized Audio Stream Denial of Service

Roger Wilco Server 1.4.1 - Unauthorized Audio Stream Denial of Service source: https://www.securityfocus.com/bid/10025/info A vulnerability has been reported in the Roger Wilco Server, it is reported that a user does not need to connect to the server over the TCP port to have UDP based audio...

Roger Wilco Server 1.4.1 - Unauthorized Audio Stream Denial of Service

source: https://www.securityfocus.com/bid/10025/info A vulnerability has been reported in the Roger Wilco Server, it is reported that a user does not need to connect to the server over the TCP port to have UDP based audio streams handled. Rather the attacker will require knowledge of user ID's...

Etherleak information leak in Windows Server 2003 drivers

NGSSoftware Insight Security Research Advisory Name: Etherleak information leak in Windows Server 2003 drivers Systems Affected: Windows Server 2003 all versions Severity: Low/Medium Risk Vendor URL: http://www.microsoft.com/windowsserver2003/ Author: Chris Paget [email protected] Date: 9th...

CVE-2003-0209

Integer overflow in the TCP stream reassembly module stream4 for Snort 2.0 and earlier allows remote attackers to execute arbitrary code via large sequence numbers in packets, which enable a heap-based buffer overflow...

snort multiple bugs

Integer overflow during TCP stream processing leads to heap overflow. Heap overflow in stream4 filter...

CVE-2003-0209

CVE-2003-0209 : Snort 2.0 and earlier contains an integer overflow in the TCP stream4 preprocessor used for TCP stream reassembly. This heap-based overflow can be exploited remotely via large TCP sequence numbers to execute arbitrary code, typically as the Snort user (likely root). Multiple sourc...

CVE-2003-0209

Integer overflow in the TCP stream reassembly module stream4 for Snort 2.0 and earlier allows remote attackers to execute arbitrary code via large sequence numbers in packets, which enable a heap-based buffer overflow...

CVE-2003-0209

Removed by vendor...

CORE-2003-0307: Snort TCP Stream Reassembly Integer Overflow Vulnerability

Core Security Technologies Advisory http://www.coresecurity.com Snort TCP Stream Reassembly Integer Overflow Vulnerability Date Published: 2003-04-15 Last Update: 2003-04-15 Advisory ID: CORE-2003-0307 Bugtraq ID: 7178 CVE Name: None currently assigned Title: Snort TCP Stream Reassembly Integer...

Problems with Snort-1.9.1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Problem: Snort-1.9.1 using a default snort.conf configuration does not detect certain crafted packets. Details: Snort-1.9.1 does not detect packets when the SYN,FIN and ECN echo bits set. The following is an example of a packet: 12:37:12.386797...

eSafe gateway fails to catch virii if used in CVP

Subject: eSafe gateway fails to catch virii if used in CVP Affected: eSafe gateway v3.5.126.0 Vendor: Aladdin Knowlege Systems Author: Igor U.Miturin [email protected] Date: February, 5 2003 Risk: Average Vendor Notified: No I. Intro eSafe gateway is a suite of content filtering product...