CVE-2006-1664

概要

参考情報

• bugs.gentoo.org/show_bug.cgi
• secunia.com/advisories/19853
• secunia.com/advisories/19856
• secunia.com/advisories/28666
• securitytracker.com/id
• sourceforge.net/project/shownotes.php
• gentoo.org/security/en/glsa/glsa-200604-16.xml
• securityfocus.com/bid/17370
• securityfocus.com/data/vulnerabilities/exploits/xinelib_poc.pl · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/25670
• exploit-db.com/exploits/1641
• redhat.com/archives/fedora-package-announce/2008-January/msg00956.html
• redhat.com/archives/fedora-package-announce/2008-January/msg00976.html

xine-lib のその他の脆弱性

• CVE-2009-1274中 5.0Integer overflow in the qt_error parse_trak_atom function in demuxers/demux_qt.c in xine-lib 1.1.16.2 and earlier allows remote attackers to…
• CVE-2009-0698高 7.5Integer overflow in the 4xm demuxer (demuxers/demux_4xm.c) in xine-lib 1.1.16.1 allows remote attackers to cause a denial of service (crash)…
• CVE-2008-5248中 4.3xine-lib before 1.1.15 allows remote attackers to cause a denial of service (crash) via "MP3 files with metadata consisting only of separato…
• CVE-2008-5247中 4.3The real_parse_audio_specific_data function in demux_real.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, uses an untrusted hei…
• CVE-2008-5246緊急 9.3Multiple heap-based buffer overflows in xine-lib before 1.1.15 allow remote attackers to execute arbitrary code via vectors that send ID3 da…