Multiple heap-based buffer overflows in the code used to handle (1) MMS over TCP (MMST) streams or (2) RealMedia RTSP streams in xine-lib prior to 1.0, and other products that use xine-lib such as MPlayer 1.0pre6 and previous versions, allow remote malicious servers to execute arbitrary code.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
mplayer mplayer |
||
xine xine-lib 1 beta7 |
||
xine xine-lib 1 beta9 |
||
xine xine-lib 1 rc3b |
||
xine xine-lib 1 beta4 |
||
xine xine-lib 1 rc3c |
||
xine xine-lib 1 rc2 |
||
xine xine-lib 1 beta2 |
||
xine xine-lib 1 beta5 |
||
xine xine-lib 1 beta11 |
||
xine xine-lib 1 beta6 |
||
xine xine-lib 1 rc3a |
||
xine xine-lib 1 beta1 |
||
xine xine-lib 1 beta10 |
||
xine xine-lib 1 beta8 |
||
xine xine-lib 1 beta3 |