Mandrake Linux Security Advisory : xine-lib (MDKSA-2005:094)

NASLDB: Mandrake Linux Security Advisory : xine-lib (MDKSA-2005:094)

General

ID: 18412
Name: Mandrake Linux Security Advisory : xine-lib (MDKSA-2005:094)

Summary: Checks rpm output for the updated packages

Credits: Tenable Network Security, Inc.

Classification

Risk: –

CVSS: –
CVSS Base Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS Temporal Vector: –

Port: 0
Family: Mandriva Local Security Checks
Type: Local

Description

Two buffer overflow vulnerabilities were discovered in the MMS and
Real RTSP stream handlers in the Xine libraries. If an attacker can
trick a user to connect to a malicious MMS or RTSP video/audio stream
source with any application using this library, they could crash the
client and possibly even execute arbitrary code with the privileges of
the user running the player program.

The updated packages have been patched to correct these problems.

Exploiting

Exploit Available: –
Exploitability Ease: –

Sources

CVE: CVE-2005-1195
OSVDB: –
Bugtraq: –
scipID: –

Timeline

Vulnerability Disclosure: 2005/04/21
Patch Release: 2005/05/26
Plugin Release: 2005/06/02

Plugin

Version: 1.13
Filename: mandrake_MDKSA-2005-094.nasl
Filesize: 5615 bytes
MD5 Hash: 7b57be9457e9dab024c640e4ddaec067

Identification: Host/local_checks_enabled
Require Keys: Host/local_checks_enabled", "Host/cpu", "Host/Mandrake/release", "Host/Mandrake/rpm-list
Dependencies: "ssh_get_info.nasl"

Letzte Plugins

Letzte Plugins

scip AG