xine-lib: Heap-based buffer overflow

Background xine-lib is the core library package for the xine media player. Description xine-lib does not check boundaries on data being read into buffers from DMO video files in code that is shared with MPlayer DMOVideoDecoder.c. Impact An attacker could entice a user to play a specially crafted...

Mandrake Linux Security Advisory : xine-lib (MDKSA-2007:062)

The DSVideoDecoderOpen function in DirectShow/DSVideoDecoder.c in xine-lib does not set the biSize before use in a memcpy, which allows user-assisted remote attackers to cause a buffer overflow and possibly execute arbitrary code. Updated packages have been patched to address this issue...

CVE-2007-1387

The DirectShow loader loader/dshow/DSVideoDecoder.c in MPlayer 1.0rc1 and earlier, as used in xine-lib, does not set the biSize before use in a memcpy, which allows user-assisted remote attackers to cause a buffer overflow and possibly execute arbitrary code, a different vulnerability than...

DEBIAN-CVE-2007-1387

The DirectShow loader loader/dshow/DSVideoDecoder.c in MPlayer 1.0rc1 and earlier, as used in xine-lib, does not set the biSize before use in a memcpy, which allows user-assisted remote attackers to cause a buffer overflow and possibly execute arbitrary code, a different vulnerability than...

CVE-2007-1387

The CVE-2007-1387 entry concerns the DirectShow loader (loader/dshow/DS_VideoDecoder.c) in MPlayer 1.0rc1 and earlier, used by xine-lib. The root cause is failure to set biSize before memcpy, which can cause a buffer overflow and potentially allow remote code execution. The provided documents do ...

CVE-2007-1387

The DirectShow loader loader/dshow/DSVideoDecoder.c in MPlayer 1.0rc1 and earlier, as used in xine-lib, does not set the biSize before use in a memcpy, which allows user-assisted remote attackers to cause a buffer overflow and possibly execute arbitrary code, a different vulnerability than...

Mandrake Linux Security Advisory : xine-lib (MDKSA-2007:057)

The DMOVideoDecoderOpen function in dmo/DMOVideoDecoder.c in xine-lib does not set the biSize before use in a memcpy, which allows user-assisted remote attackers to cause a buffer overflow and possibly execute arbitrary code. Updated packages have been patched to address this issue. %NASLMINLEVEL...

CVE-2007-1246

The DMOVideoDecoderOpen function in loader/dmo/DMOVideoDecoder.c in MPlayer 1.0rc1 and earlier, as used in xine-lib, does not set the biSize before use in a memcpy, which allows user-assisted remote attackers to cause a buffer overflow and possibly execute arbitrary code, a different vulnerabilit...

Buffer overflow

The DMOVideoDecoderOpen function in loader/dmo/DMOVideoDecoder.c in MPlayer 1.0rc1 and earlier, as used in xine-lib, does not set the biSize before use in a memcpy, which allows user-assisted remote attackers to cause a buffer overflow and possibly execute arbitrary code, a different vulnerabilit...

CVE-2007-1246

The CVE-2007-1246 issue affects MPlayer prior to/including 1.0rc1 (as used in xine-lib). The vulnerability resides in DMO_VideoDecoder_Open (loader/dmo/DMO_VideoDecoder.c) where biSize is not set before a memcpy, enabling a user‑assisted remote attacker to trigger a buffer overflow and potentiall...

Slackware 10.0 / 10.1 / 10.2 / 11.0 / 9.1 : xine-lib (SSA:2006-357-05)

New xine-lib packages are available for Slackware 9.1, 10.0, 10.1, 10.2, and 11.0 to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2006-357-05. The text itself is...

SUSE-SA:2007:013: xine-ui,xine-lib,xine-extra,xine-devel

The remote host is missing the patch for the advisory SUSE-SA:2007:013 xine-ui,xine-lib,xine-extra,xine-devel. This update fixes several format string bugs that can be exploited remotely with user-assistance to execute arbitrary code. Since SUSE Linux version 10.1 format string bugs are not...

Mandrake Linux Security Advisory : xine-lib (MDKSA-2006:176)

Xine-lib uses an embedded copy of ffmpeg and as such has been updated to address the following issue: Multiple buffer overflows in libavcodec in ffmpeg before 0.4.9p20060530 allow remote attackers to cause a denial of service or possibly execute arbitrary code via multiple unspecified vectors in ...

libxine -- buffer overflow vulnerability

xine Team reports: A new xine-lib version is now available. This release contains a security fix array index vulnerability which may lead to a stack buffer overflow...

Debian DSA-1244-1 : xine-lib - buffer overflow

It was discovered that the Xine multimedia library performs insufficient sanitising of Real streams, which might lead to the execution of arbitrary code through a buffer overflow. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

xine-lib buffer overflow

Buffer overflow on parsing Real streaming protocol...

[SECURITY] [DSA 1244-1] New xine-lib packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1244-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 28th, 2006 http://www.debian.org/security/faq -...

DSA-1244-1 xine-lib

Bulletin has no description...

[slackware-security] xine-lib

New xine-lib packages are available for Slackware 9.1, 10.0, 10.1, 10.2, and 11.0 to fix security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2006-2200 Here are the details from the Slackware 11.0...

GLSA-200612-02 : xine-lib: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200612-02 xine-lib: Buffer overflow A possible buffer overflow has been reported in the Real Media input plugin. Impact : An attacker could exploit this vulnerability by enticing a user into loading a specially crafted stream with...