Debian: Security Advisory (DSA-1105)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 657-1 (xine-lib)

The remote host is missing an update to xine-lib announced via advisory DSA 657-1. OpenVAS Vulnerability Test $Id: deb6571.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 657-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 1244-1 (xine-lib)

The remote host is missing an update to xine-lib announced via advisory DSA 1244-1. It was discovered that the Xine multimedia library performs insufficient sanitising of Real streams, which might lead to the execution of arbitrary code through a buffer overflow. OpenVAS Vulnerability Test $Id:...

Debian: Security Advisory (DSA-1215-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1005-1 (xine-lib)

The remote host is missing an update to xine-lib announced via advisory DSA 1005-1. Simon Kilvington discovered that specially crafted PNG images can trigger a heap overflow in libavcodec, the multimedia library of ffmpeg, which may lead to the execution of arbitrary code. xine-lib includes a loc...

Debian Security Advisory DSA 1105-1 (xine-lib)

The remote host is missing an update to xine-lib announced via advisory DSA 1105-1. Federico L. Bossi Bonin discovered a buffer overflow in the HTTP Plugin in xine-lib, the xine video/media player library, that could allow a remote attacker to cause a denial of service. For the old stable...

Debian Security Advisory DSA 657-1 (xine-lib)

The remote host is missing an update to xine-lib announced via advisory DSA 657-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1215-1 (xine-lib)

The remote host is missing an update to xine-lib announced via advisory DSA 1215-1. Several remote vulnerabilities have been discovered in the Xine multimedia library, which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following...

Debian: Security Advisory (DSA-1005-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1244-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 8 : xine-lib-1.1.9.1-1.fc8 (2008-0718)

Update to latest upstream security fix release, 1.1.9.1. http://sourceforge.net/project/shownotes.php?releaseid=567872&groupi d=9655 http://sourceforge.net/project/shownotes.php?releaseid=566391&groupi d=9655 Note that Tenable Network Security has extracted the preceding description block directl...

[SECURITY] Fedora 8 Update: xine-lib-1.1.9.1-1.fc8

This package contains the Xine library. Xine is a free multimedia player. It can play back various media. It also decodes multimedia files from local disk drives, and displays multimedia streamed over the Internet. It interprets many of the most common multimedia formats available - and some of t...

DTSA-109-1 xine-lib - heap-based buffer overflow

Bulletin has no description...

CVE-2008-0238

Multiple heap-based buffer overflows in the rmffdumpcont function in input/libreal/rmff.c in xine-lib 1.1.9 allow remote attackers to execute arbitrary code via the SDP 1 Title, 2 Author, or 3 Copyright attribute, related to the rmffdumpheader function, different vectors than CVE-2008-0225. NOTE:...

CVE-2008-0238

Multiple heap-based buffer overflows in the rmffdumpcont function in input/libreal/rmff.c in xine-lib 1.1.9 allow remote attackers to execute arbitrary code via the SDP 1 Title, 2 Author, or 3 Copyright attribute, related to the rmffdumpheader function, different vectors than CVE-2008-0225. NOTE:...

CVE-2008-0238

The CVE-2008-0238 entry concerns xine-lib prior to 1.1.9 with heap-based overflows in rmff_dump_cont (input/libreal/rmff.c), related to rmff_dump_header, allowing remote code execution via SDP attributes (Title, Author, Copyright). This is one of two heap-overflow vectors for xine-lib (the other ...

xine-lib rmff_dump_cont()远程堆溢出漏洞

BUGTRAQ ID: 27198 xine是一款免费的媒体播放器，支持多种格式。 xine处理畸形格式的数据时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 xine的input/libreal/rmff.c文件中的rmffdumpcont函数没有正确地处理SDP Title、Author、Copyright和Abstract属性，如果用户受骗连接到了恶意的RTSP服务器的话，就可能触发堆溢出，导致执行任意指令。以下是input/libreal/rmff.c中的漏洞代码： int rmffdumpheaderrmffheadert h, char buffer, int m...

Heap overflow

Heap-based buffer overflow in the rmffdumpcont function in input/libreal/rmff.c in xine-lib 1.1.9 and earlier allows remote attackers to execute arbitrary code via the SDP Abstract attribute in an RTSP session, related to the rmffdumpheader function and related to disregarding the max field. NOTE...

CVE-2008-0225

Heap-based buffer overflow in the rmffdumpcont function in input/libreal/rmff.c in xine-lib 1.1.9 and earlier allows remote attackers to execute arbitrary code via the SDP Abstract attribute in an RTSP session, related to the rmffdumpheader function and related to disregarding the max field. NOTE...

CVE-2008-0225

Heap-based buffer overflow in the rmffdumpcont function in input/libreal/rmff.c in xine-lib 1.1.9 and earlier allows remote attackers to execute arbitrary code via the SDP Abstract attribute in an RTSP session, related to the rmffdumpheader function and related to disregarding the max field. NOTE...