.:[ packet storm ]:.
                               
global security disclosure
global security disclosure

 ///  File Name:MDVSA-2008-178.txt
Description:
Mandriva Linux Security Advisory - Alin Rad Pop found an array index vulnerability in the SDP parser of xine-lib. If a user or automated system were tricked into opening a malicious RTSP stream, a remote attacker could possibly execute arbitrary code with the privileges of the user using the program. The ASF demuxer in xine-lib did not properly check the length of ASF headers. If a user was tricked into opening a crafted ASF file, a remote attacker could possibly cause a denial of service or execute arbitrary code with the privileges of the user using the program. The Matroska demuxer in xine-lib did not properly verify frame sizes, which could possibly lead to the execution of arbitrary code if a user opened a crafted ASF file. Luigi Auriemma found multiple integer overflows in xine-lib. If a user was tricked into opening a crafted FLV, MOV, RM, MVE, MKV, or CAK file, a remote attacker could possibly execute arbitrary code with the privileges of the user using the program. Guido Landi found A stack-based buffer overflow in xine-lib that could allow a remote attacker to cause a denial of service (crash) and potentially execute arbitrary code via a long NSF title. The updated packages have been patched to correct this issue.
Homepage:http://www.mandriva.com/security/
File Size:5942
Related CVE(s):CVE-2008-0073, CVE-2008-1110, CVE-2008-1161, CVE-2008-1482, CVE-2008-1878
Last Modified:Aug 21 20:36:00 2008
MD5 Checksum:f81b67007a37ee028b814f93f17b95cb

 .:. Back
 

 ///  Last 10 Files
  1. :· MDVSA-2008-220-1.txt
  2. :· MDVSA-2008-232.txt
  3. :· USN-674-1.txt
  4. :· dsa-1667-1.txt
  5. :· revsense-sql.txt
  6. :· maurycms-upload.txt
  7. :· linksautomation-sql.txt
  8. :· linksxs-sql.txt
  9. :· ethiclinks-sql.txt
  10. :· easyeditcms-sql.txt
[ Last 20 | Last 50 | Last 100 ]

 ///  Last 10 Advisories
  1. :· MDVSA-2008-220-1.txt
  2. :· MDVSA-2008-232.txt
  3. :· USN-674-1.txt
  4. :· dsa-1667-1.txt
  5. :· PR08-09.txt
  6. :· secunia-streamripper.txt
  7. :· tonline-multi.txt
  8. :· MDVSA-2008-231.txt
  9. :· USN-673-1.txt
  10. :· CESA-2008-009.html
[ Last 20 | Last 50 | Last 100 ]

 ///  Last 10 Exploits
  1. :· revsense-sql.txt
  2. :· maurycms-upload.txt
  3. :· linksautomation-sql.txt
  4. :· linksxs-sql.txt
  5. :· ethiclinks-sql.txt
  6. :· easyeditcms-sql.txt
  7. :· msvista-overflow.txt
  8. :· mytopix-sql.txt
  9. :· punbb-lfi.txt
  10. :· PR07-40.txt
[ Last 20 | Last 50 | Last 100 ]

 ///  Last 10 Tools
  1. :· pysumpas-0.2.0.tar.gz
  2. :· framework-3.2.tar.gz
  3. :· tor.uclibc.i686.20081115.iso
  4. :· RFIDIOt-Windows-0.1u.zip
  5. :· RFIDIOt-0.1u.tgz
  6. :· dps-v1.5.tar.gz
  7. :· smbrelay3.zip
  8. :· mptrey.tar.gz
  9. :· dotnetsploitsrc-1.0.zip
  10. :· MultiInjectorV0.3.tar.gz
[ Last 20 | Last 50 | Last 100 ]

 ///  Last 10 Misc
  1. :· sudoers-shellcode.txt
  2. :· strongswan-4.2.9.tar.gz
  3. :· hodetector-shellcode.txt
  4. :· rtm-essential5.pdf
  5. :· unixasm-1.3.0.tar.gz
  6. :· bnd-networks.pdf
  7. :· smallnonulls-exec.txt
  8. :· challenge20081010.txt
  9. :· dotnetrookits.pdf
  10. :· exploration.pdf
[ Last 20 | Last 50 | Last 100 ]


 .:. TopPrivacy Statement | Copyright Notice