CVE-2004-1311

CVE-2004-1311 affects Unix MPlayer 1.0pre5 with an integer overflow in real_setup_and_get_header() in real.c. A Real RTSP streaming media file containing a -1 content-length field can trigger a heap-based buffer overflow, enabling remote denial of service (application crash) and potentially arbit...

MPlayer: Multiple overflows

Background MPlayer is a media player capable of handling multiple multimedia file formats. Description iDEFENSE, Ariel Berkman and the MPlayer development team found multiple vulnerabilities in MPlayer. These include potential heap overflows in Real RTSP and pnm streaming code, stack overflows in...

GLSA-200412-21 : MPlayer: Multiple overflows

The remote host is affected by the vulnerability described in GLSA-200412-21 MPlayer: Multiple overflows iDEFENSE, Ariel Berkman and the MPlayer development team found multiple vulnerabilities in MPlayer. These include potential heap overflows in Real RTSP and pnm streaming code, stack overflows ...

mplayer -- multiple vulnerabilities

iDEFENSE and the MPlayer Team have found multiple vulnerabilities in MPlayer: Potential heap overflow in Real RTSP streaming code Potential stack overflow in MMST streaming code Multiple buffer overflows in BMP demuxer Potential heap overflow in pnm streaming code Potential buffer overflow in...

CVE-2004-1123

CVE-2004-1123 affects Darwin Streaming Server 5.0.1 (and possibly earlier) where a DESCRIBE request containing a null-byte location may crash the server, causing a denial of service. The vulnerability is remote and unauthenticated, leading to a partial availability impact as noted in the CVSS vec...

CVE-2004-1123

Darwin Streaming Server 5.0.1, and possibly earlier versions, allows remote attackers to cause a denial of service server crash via a DESCRIBE request with a location that contains a null byte...

CVE-2004-1123: Undefined Security Weakness

Darwin Streaming Server 5.0.1, and possibly earlier versions, allows remote attackers to cause a denial of service server crash via a DESCRIBE request with a location that contains a null byte...

[Full-Disclosure] iDEFENSE Security Advisory 12.03.2004: Apple Darwin Streaming Server DESCRIBE Null Byte Denial of Service Vulnerability

Apple Darwin Streaming Server DESCRIBE Null Byte Denial of Service Vulnerability iDEFENSE Security Advisory 12.03.2004 www.idefense.com/application/poi/display?id=159&type=vulnerabilities December 03, 2004 I. BACKGROUND Darwin Streaming Server is an open source version of Apple's QuickTime...

Apple Darwin Streaming Server NULL pointer DoS

Null pointer reference in DESCRIBE command...

JanaServer 2 - Multiple Remote Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/11780/info JanaServer 2 is a commercially available proxy server designed for the Microsoft Windows platform. It contains support for services such as HTTP, FTP, email, and RealPlayer streaming. Multiple remote denial of service vulnerabilities affect...

JanaServer 2 - Multiple Remote Denial of Service Vulnerabilities

JanaServer 2 - Multiple Remote Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/11780/info JanaServer 2 is a commercially available proxy server designed for the Microsoft Windows platform. It contains support for services such as HTTP, FTP, email, and RealPlayer...

CVE-2004-0825

CVE-2004-0825 affects Apple QuickTime Streaming Server used in Mac OS X Server versions 10.2.8, 10.3.4, and 10.3.5. The vulnerability allows a remote attacker to cause a denial-of-service (application deadlock) through a specific sequence of operations. The NVD entry provides a Network attack vec...

CVE-2004-0825

QuickTime Streaming Server in Mac OS X Server 10.2.8, 10.3.4, and 10.3.5 allows remote attackers to cause a denial of service application deadlock via a certain sequence of operations...

CVE-2004-0825: Undefined Security Weakness

QuickTime Streaming Server in Mac OS X Server 10.2.8, 10.3.4, and 10.3.5 allows remote attackers to cause a denial of service application deadlock via a certain sequence of operations...

CVE-2004-0169

CVE-2004-0169 concerns QuickTime Streaming Server in MacOS X 10.2.8 and 10.3.2. The vulnerability arises when processing RTSP DESCRIBE requests with overly long User-Agent fields, triggering an Assert in BufferIsFull and potentially crashing the server. Multiple sources corroborate that remote at...

CVE-2004-0169

QuickTime Streaming Server in MacOS X 10.2.8 and 10.3.2 allows remote attackers to cause a denial of service crash via DESCRIBE requests with long User-Agent fields, which causes an Assert error to be triggered in the BufferIsFull function...

CVE-2003-0050

parsexml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute arbitrary code via shell metacharacters...

CVE-2003-0051

parsexml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to obtain the physical path of the server's installation path via a NULL file parameter...

CVE-2003-0052

parsexml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to list arbitrary directories...

CVE-2003-0053

Cross-site scripting XSS vulnerability in parsexml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to insert arbitrary script via the filename parameter, which is inserted into an error message...