Description
Multiple heap-based buffer overflows in the code used to handle (1) MMS over TCP (MMST) streams or (2) RealMedia RTSP streams in xine-lib before 1.0, and other products that use xine-lib such as MPlayer 1.0pre6 and earlier, allow remote malicious servers to execute arbitrary code.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20175 ↗
- http://cvs.sourceforge.net/viewcvs.py/xine/xine-lib/src/input/mms.c?r1=1.55&r2=1.56&diff_format=u ↗
- http://www.securityfocus.com/bid/13271 ↗
- http://www.gentoo.org/security/en/glsa/glsa-200504-19.xml ↗
- http://www.mplayerhq.hu/homepage/design7/news.html#vuln11 ↗
- http://securitytracker.com/id?1013771 ↗
- http://www.osvdb.org/15712 ↗
- http://secunia.com/advisories/15014 ↗
- http://www.mplayerhq.hu/homepage/design7/news.html#vuln10 ↗
- http://seclists.org/lists/bugtraq/2005/Apr/0337.html ↗
- http://cvs.sourceforge.net/viewcvs.py/xine/xine-lib/src/input/librtsp/rtsp.c?r1=1.18&r2=1.19&diff_format=u ↗
- http://www.securityfocus.com/archive/1/396703 ↗
- http://www.osvdb.org/15711 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20171 ↗