Fedora 11 : xmp-2.7.1-1.fc11 (2009-9675)

Update to latest stable release. Multiple bugfixes and memory leak fixes. Fixes for buffer overflows in DTT and OXM loaders. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean an...

CVE-2007-6731

Extended Module Player XMP 2.5.1 and earlier allow remote attackers to execute arbitrary code via an OXM file with a negative value, which bypasses a check in 1 testoxm and 2 decrunchoxm functions in misc/oxm.c, leading to a buffer overflow...

CVE-2007-6732

Multiple buffer overflows in the dttload function in loaders/dttload.c Extended Module Player XMP 2.5.1 and earlier allow remote attackers to execute arbitrary code via unspecified vectors related to an untrusted length value and the 1 pofs and 2 plen arrays...

CVE-2007-6731

Extended Module Player XMP 2.5.1 and earlier allow remote attackers to execute arbitrary code via an OXM file with a negative value, which bypasses a check in 1 testoxm and 2 decrunchoxm functions in misc/oxm.c, leading to a buffer overflow...

CVE-2007-6731

Extended Module Player XMP 2.5.1 and earlier allow remote attackers to execute arbitrary code via an OXM file with a negative value, which bypasses a check in 1 testoxm and 2 decrunchoxm functions in misc/oxm.c, leading to a buffer overflow...

CVE-2007-6731

Extended Module Player XMP 2.5.1 and earlier allow remote attackers to execute arbitrary code via an OXM file with a negative value, which bypasses a check in 1 testoxm and 2 decrunchoxm functions in misc/oxm.c, leading to a buffer overflow...

CVE-2007-6732

Multiple buffer overflows in the dttload function in loaders/dttload.c Extended Module Player XMP 2.5.1 and earlier allow remote attackers to execute arbitrary code via unspecified vectors related to an untrusted length value and the 1 pofs and 2 plen arrays...

CVE-2007-6731

CVE-2007-6731 affects Extended Module Player (XMP) up to version 2.5.1 and earlier. The vulnerability arises in the OXM loader: a negative value in an OXM file bypasses checks in test_oxm and decrunch_oxm in misc/oxm.c, causing a buffer overflow. This leads to remote code execution risks as descr...

CVE-2007-6732

Multiple buffer overflows in the dttload function in loaders/dttload.c Extended Module Player XMP 2.5.1 and earlier allow remote attackers to execute arbitrary code via unspecified vectors related to an untrusted length value and the 1 pofs and 2 plen arrays...

CVE-2007-6731

Extended Module Player XMP 2.5.1 and earlier allow remote attackers to execute arbitrary code via an OXM file with a negative value, which bypasses a check in 1 testoxm and 2 decrunchoxm functions in misc/oxm.c, leading to a buffer overflow...

CVE-2007-6732

CVE-2007-6732 affects Extended Module Player (XMP) 2.5.1 and earlier, with multiple buffer overflows in the dtt_load function (loaders/dtt_load.c) allowing remote code execution via untrusted length and the (1) pofs and (2) plen arrays. OpenVAS/Nessus feeds reference patches/update advisories (e....

Extended Module Player oxm.c及dtt_load.c文件多个本地溢出漏洞

BUGTRAQ ID: 27047 Extended Module Player（XMP）是用于播放老式MOD文件的命令行播放器。 XMP实现上存在多个缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 --------------------------------------------- A testoxm/decrunchoxm缓冲区溢出 --------------------------------------------- 由于可以绕过ilen...

Buffer-overflow in Extended Module Player 2.5.1

Luigi Auriemma Application: Extended Module Player XMP http://xmp.sourceforge.net Versions: = 2.5.1 Platforms: Linux, BSD, Solaris, HP-UX, MacOS X, QNX, BeOS, Windows, OS/2 and AmigaOS Bugs: A buffer-overflow in testoxm / decrunchoxm B buffer-overflow in dttload Exploitation: local Date: 27 Dec...