631 matches found
Debian: Security Advisory (DSA-1586-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-1586-1 : xine-lib - multiple vulnerabilities
Multiple vulnerabilities have been discovered in xine-lib, a library which supplies most of the application functionality of the xine multimedia player. The Common Vulnerabilities and Exposures project identifies the following three problems : - CVE-2008-1482 Integer overflow vulnerabilities exis...
[SECURITY] [DSA 1586-1] New xine-lib packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-1586-1 [email protected] http://www.debian.org/security/ Devin Carraway May 22, 2008 http://www.debian.org/security/faq -...
DSA-1586-1 xine-lib - multiple vulnerabilities
Bulletin has no description...
SuSE 10 Security Update : xine-lib (ZYPP Patch Number 5205)
Specially crafted NSF files could potentially be exploited to execute arbitrary code. CVE-2008-1878 Specially crafted files or streams could potentially be abused to trick applications that support speex into executing arbitrary code. CVE-2008-1686 %NASLMINLEVEL 70300 C Tenable Network Security,...
DTSA-128-1 xine-lib - multiple vulnerabilities
Bulletin has no description...
Fedora 7 : xine-lib-1.1.11.1-1.fc7.2 (2008-3326)
Bug 442882 - CVE-2008-1878 xine-lib: buffer overflow in nsf demuxer Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
Fedora 8 : xine-lib-1.1.12-2.fc8 (2008-3353)
Bug 442882 - CVE-2008-1878 xine-lib: buffer overflow in nsf demuxer Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
[SECURITY] Fedora 8 Update: xine-lib-1.1.12-2.fc8
This package contains the Xine library. Xine is a free multimedia player. It can play back various media. It also decodes multimedia files from local disk drives, and displays multimedia streamed over the Internet. It interprets many of the most common multimedia formats available - and some of t...
Stack overflow
Stack-based buffer overflow in the demuxnsfsendheaders function in src/demuxers/demuxnsf.c in xine-lib allows remote attackers to have an unknown impact via a long copyright field in an NSF header in an NES Sound file, a different issue than CVE-2008-1878. NOTE: a third party claims that the...
CVE-2008-1964
Stack-based buffer overflow in the demuxnsfsendheaders function in src/demuxers/demuxnsf.c in xine-lib allows remote attackers to have an unknown impact via a long copyright field in an NSF header in an NES Sound file, a different issue than CVE-2008-1878. NOTE: a third party claims that the...
CVE-2008-1964
Stack-based buffer overflow in the demuxnsfsendheaders function in src/demuxers/demuxnsf.c in xine-lib allows remote attackers to have an unknown impact via a long copyright field in an NSF header in an NES Sound file, a different issue than CVE-2008-1878. NOTE: a third party claims that the...
CVE-2008-1964
CVE-2008-1964 describes a stack-based buffer overflow in the demux_nsf_send_headers function of xine-lib (src/demuxers/demux_nsf.c) triggered by a long copyright field in an NSF header within NES Sound files. The issue is remote in nature with potential partial impacts to confidentiality, integri...
CVE-2008-1964
Stack-based buffer overflow in the demuxnsfsendheaders function in src/demuxers/demuxnsf.c in xine-lib allows remote attackers to have an unknown impact via a long copyright field in an NSF header in an NES Sound file, a different issue than CVE-2008-1878. NOTE: a third party claims that the...
xine-lib NES声音格式解码器copyright字段栈溢出漏洞
BUGTRAQ ID: 28908 xine是一款免费的媒体播放器，支持多种格式。 xine播放器的demuxnfs.c文件中没有正确地验证媒体文件中的copyright字段： line 111: this-copyright = strdup&header0x4E; line 189: char copyright100; line 208: sprintfcopyright, "C %s", this-copyright; 如果用户受骗打开了带有超长copyright字段的媒体文件的话，就可能触发栈溢出，导致执行任意指令。 xine-lib 1.1.12 xine ----...
Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / current : xine-lib (SSA:2008-111-01)
New xine-lib packages are available for Slackware 10.0, 10.1, 10.2, 11.0, 12.0, and -current to fix security issues. An overflow was found in the Speex decoder that could lead to a crash or possible execution of arbitrary code. Xine-lib = 1.1.12 was also found to be vulnerable to a stack-based...
PT-2008-3486 · Xine · Xine-Lib
Name of the Vulnerable Software and Affected Versions: xine-lib affected versions not specified Description: The issue is related to a stack-based buffer overflow in the demux nsf send headers function, located in src/demuxers/demux nsf.c. This overflow can be triggered by a long copyright field ...
xine-lib NES Sound Format Demuxer Buffer Overflow
Hi there Original advisory: http://milw0rm.com/exploits/5458 There's another stack-based buffer overflow in demuxnfs.c line 111: this-copyright = strdup&header0x4E; line 189: char copyright100; line 208: sprintfcopyright, "C s", this-copyright; Regards Laurent Gaffi...
[slackware-security] xine-lib
New xine-lib packages are available for Slackware 10.0, 10.1, 10.2, 11.0, 12.0, and -current to fix security issues. An overflow was found in the Speex decoder that could lead to a crash or possible execution of arbitrary code. Xine-lib = 1.1.12 was also found to be vulnerable to a stack-based...
GLSA-200804-17 : Speex: User-assisted execution of arbitrary code
The remote host is affected by the vulnerability described in GLSA-200804-17 Speex: User-assisted execution of arbitrary code oCERT reported that the Speex library does not properly validate the 'mode' value it derives from Speex streams, allowing for array indexing vulnerabilities inside multipl...