Search CVE reports
31 – 40 of 53 results
CVE-2008-1686
Medium prioritySome fixes available 32 of 47
Array index vulnerability in Speex 1.1.12 and earlier, as used in libfishsound 0.9.0 and earlier, including Illiminable DirectShow Filters and Annodex Plugins for Firefox, xine-lib before 1.1.12, and many other products, allows...
8 affected packages
gst-plugins-good0.10, libfishsound, speex, sweep, vlc...
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| gst-plugins-good0.10 | — | — | — | — | — |
| libfishsound | — | — | — | — | — |
| speex | — | — | — | — | — |
| sweep | — | — | — | — | — |
| vlc | — | — | — | — | — |
| vorbis-tools | — | — | — | — | — |
| xine-lib | — | — | — | — | — |
| xmms-speex | — | — | — | — | — |
CVE-2008-1482
Medium prioritySome fixes available 3 of 4
Multiple integer overflows in xine-lib 1.1.11 and earlier allow remote attackers to trigger heap-based buffer overflows and possibly execute arbitrary code via (1) a crafted .FLV file, which triggers an overflow...
1 affected packages
xine-lib
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| xine-lib | — | — | — | — | — |
CVE-2008-0073
Medium prioritySome fixes available 11 of 24
Array index error in the sdpplin_parse function in input/libreal/sdpplin.c in xine-lib 1.1.10.1 allows remote RTSP servers to execute arbitrary code via a large streamid SDP parameter.
3 affected packages
mplayer, vlc, xine-lib
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| mplayer | — | — | — | — | — |
| vlc | — | — | — | — | — |
| xine-lib | — | — | — | — | — |
CVE-2008-1161
Medium prioritySome fixes available 3 of 4
Buffer overflow in the Matroska demuxer (demuxers/demux_matroska.c) in xine-lib before 1.1.10.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Matroska file with invalid frame sizes.
1 affected packages
xine-lib
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| xine-lib | — | — | — | — | — |
CVE-2008-1110
Medium prioritySome fixes available 2 of 3
Buffer overflow in demuxers/demux_asf.c (aka the ASF demuxer) in the xineplug_dmx_asf.so plugin in xine-lib before 1.1.10 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a crafted ASF...
1 affected packages
xine-lib
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| xine-lib | — | — | — | — | — |
CVE-2008-0486
Medium prioritySome fixes available 6 of 7
Array index vulnerability in libmpdemux/demux_audio.c in MPlayer 1.0rc2 and SVN before r25917, and possibly earlier versions, as used in Xine-lib 1.1.10, might allow remote attackers to execute arbitrary code via a crafted FLAC...
2 affected packages
mplayer, xine-lib
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| mplayer | — | — | — | — | — |
| xine-lib | — | — | — | — | — |
CVE-2008-0238
Medium prioritySome fixes available 7 of 8
Multiple heap-based buffer overflows in the rmff_dump_cont function in input/libreal/rmff.c in xine-lib 1.1.9 allow remote attackers to execute arbitrary code via the SDP (1) Title, (2) Author, or (3) Copyright attribute, related...
2 affected packages
mplayer, xine-lib
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| mplayer | — | — | — | — | — |
| xine-lib | — | — | — | — | — |
CVE-2008-0225
Medium prioritySome fixes available 7 of 8
Heap-based buffer overflow in the rmff_dump_cont function in input/libreal/rmff.c in xine-lib 1.1.9 and earlier allows remote attackers to execute arbitrary code via the SDP Abstract attribute in an RTSP session, related to the...
2 affected packages
mplayer, xine-lib
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| mplayer | — | — | — | — | — |
| xine-lib | — | — | — | — | — |
CVE-2007-4619
Medium priorityMultiple integer overflows in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1, as used in Winamp before 5.5 and other products, allow user-assisted remote attackers to execute arbitrary code via a malformed FLAC file that...
2 affected packages
flac, xine-lib
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| flac | — | — | — | — | — |
| xine-lib | — | — | — | — | — |
CVE-2007-1387
Unknown priorityThe DirectShow loader (loader/dshow/DS_VideoDecoder.c) in MPlayer 1.0rc1 and earlier, as used in xine-lib, does not set the biSize before use in a memcpy, which allows user-assisted remote attackers to cause a buffer overflow and...
1 affected packages
xine-lib
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| xine-lib | — | — | — | — | — |