iDEFENSE Security Advisory 12.21.04: Multiple Vendor Xine version 0.99.2 PNM Handler PNA_TAG Heap Overflow Vulnerability

Multiple Vendor Xine version 0.99.2 PNM Handler PNATAG Heap Overflow Vulnerability iDEFENSE Security Advisory 12.21.04 www.idefense.com/application/poi/display?id=176&type=vulnerabilities December 21, 2004 I. BACKGROUND Xine is a multimedia player which runs on multiple platforms. More informatio...

xinebug.txt

Product: xine-bugreport/xine-check scripts. http://xinehq.de/ Versions: xine-bugreport && xine-check they are the same script, but 2 copies exist in a system with different names Bug: Symlink bug / tmpfile bug. Impact: Attacker's can write to arbitrary files, corrupt sensitive system files, and i...