CVE
- Id
- 22276
- CVE No.
- CVE-2006-6172
- Status
- Candidate
- Description
- Buffer overflow in the asmrp_eval function in the RealMedia RTSP stream handler (asmrp.c) for Real Media input plugin, as used in (1) xine/xine-lib, (2) MPlayer 1.0rc1 and earlier, and possibly others, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a rulebook with a large number of rulematches.
- Phase
- Assigned (20061130)
- Votes
- None (candidate not yet proposed)
- Comments
Related CVE References
Id | CVE Id | CVE No. | Reference | Actions |
---|---|---|---|---|
215301 | 22276 | CVE-2006-6172 | MISC:https://sourceforge.net/tracker/index.php?func=detail&aid=1603458&group_id=9655&atid=109655 | View |
215302 | 22276 | CVE-2006-6172 | MISC:http://www.mplayerhq.hu/MPlayer/patches/asmrules_fix_20061231.diff | View |
215303 | 22276 | CVE-2006-6172 | CONFIRM:http://sourceforge.net/project/shownotes.php?release_id=468432 | View |
215304 | 22276 | CVE-2006-6172 | CONFIRM:http://www.mplayerhq.hu/design7/news.html#vuln14 | View |
215305 | 22276 | CVE-2006-6172 | DEBIAN:DSA-1244 | View |
215306 | 22276 | CVE-2006-6172 | URL:http://www.debian.org/security/2006/dsa-1244 | View |
215307 | 22276 | CVE-2006-6172 | GENTOO:GLSA-200612-02 | View |
215308 | 22276 | CVE-2006-6172 | URL:http://security.gentoo.org/glsa/glsa-200612-02.xml | View |
215309 | 22276 | CVE-2006-6172 | GENTOO:GLSA-200702-11 | View |
215310 | 22276 | CVE-2006-6172 | URL:http://security.gentoo.org/glsa/glsa-200702-11.xml | View |
215311 | 22276 | CVE-2006-6172 | MANDRIVA:MDKSA-2006:224 | View |
215312 | 22276 | CVE-2006-6172 | URL:http://www.mandriva.com/security/advisories?name=MDKSA-2006:224 | View |
215313 | 22276 | CVE-2006-6172 | MANDRIVA:MDKSA-2007:112 | View |
215314 | 22276 | CVE-2006-6172 | URL:http://www.mandriva.com/security/advisories?name=MDKSA-2007:112 | View |
215315 | 22276 | CVE-2006-6172 | SLACKWARE:SSA:2006-357-05 | View |
215316 | 22276 | CVE-2006-6172 | URL:http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.433842 | View |
215317 | 22276 | CVE-2006-6172 | SUSE:SUSE-SR:2006:028 | View |
215318 | 22276 | CVE-2006-6172 | URL:http://www.novell.com/linux/security/advisories/2006_28_sr.html | View |
215319 | 22276 | CVE-2006-6172 | UBUNTU:USN-392-1 | View |
215320 | 22276 | CVE-2006-6172 | URL:http://www.ubuntu.com/usn/usn-392-1 | View |
215321 | 22276 | CVE-2006-6172 | BID:21435 | View |
215322 | 22276 | CVE-2006-6172 | URL:http://www.securityfocus.com/bid/21435 | View |
215323 | 22276 | CVE-2006-6172 | VUPEN:ADV-2006-4824 | View |
215324 | 22276 | CVE-2006-6172 | URL:http://www.vupen.com/english/advisories/2006/4824 | View |
215325 | 22276 | CVE-2006-6172 | SECUNIA:23218 | View |
215326 | 22276 | CVE-2006-6172 | URL:http://secunia.com/advisories/23218 | View |
215327 | 22276 | CVE-2006-6172 | SECUNIA:23242 | View |
215328 | 22276 | CVE-2006-6172 | URL:http://secunia.com/advisories/23242 | View |
215329 | 22276 | CVE-2006-6172 | SECUNIA:23249 | View |
215330 | 22276 | CVE-2006-6172 | URL:http://secunia.com/advisories/23249 | View |
215331 | 22276 | CVE-2006-6172 | SECUNIA:23301 | View |
215332 | 22276 | CVE-2006-6172 | URL:http://secunia.com/advisories/23301 | View |
215333 | 22276 | CVE-2006-6172 | SECUNIA:23335 | View |
215334 | 22276 | CVE-2006-6172 | URL:http://secunia.com/advisories/23335 | View |
215335 | 22276 | CVE-2006-6172 | SECUNIA:23512 | View |
215336 | 22276 | CVE-2006-6172 | URL:http://secunia.com/advisories/23512 | View |
215337 | 22276 | CVE-2006-6172 | SECUNIA:23567 | View |
215338 | 22276 | CVE-2006-6172 | URL:http://secunia.com/advisories/23567 | View |
215339 | 22276 | CVE-2006-6172 | SECUNIA:24336 | View |
215340 | 22276 | CVE-2006-6172 | URL:http://secunia.com/advisories/24336 | View |
215341 | 22276 | CVE-2006-6172 | SECUNIA:24339 | View |
215342 | 22276 | CVE-2006-6172 | URL:http://secunia.com/advisories/24339 | View |
215343 | 22276 | CVE-2006-6172 | SECUNIA:25555 | View |
Related JVN
Id | JVN No. | Title | Summary | CVE No. | CVE Id | CVSS_v2 | CVSS_v3 | JVN URL | Actions |
---|---|---|---|---|---|---|---|---|---|
58596 | JVNDB-2006-000792 | tDiary におけるクロスサイトスクリプティングの脆弱性 | tDiary 開発プロジェクトにより提供されている Web 日記支援ソフト tDiary には、クロスサイトスクリプティングの脆弱性が存在します。 | CVE-2006-6174 | 22276 | 2.6 | http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000792.html | View |