Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

xine xine 1.1.11.1 vulnerabilities and exploits

(subscribe to this query)
755
VMScore
CVE-2008-1878
Stack-based buffer overflow in the demux_nsf_send_chunk function in src/demuxers/demux_nsf.c in xine-lib 1.1.12 and previous versions allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a long NSF title.
Xine Xine-lib 1.1.9Xine Xine-libXine Xine-lib 1.1.0Xine Xine-lib 1.1.1Xine Xine-lib 1.1.10Xine Xine-lib 1.1.10.1Xine Xine-lib 1.1.11Xine Xine-lib 1.1.11.1
828
VMScore
CVE-2008-5235
Heap-based buffer overflow in the demux_real_send_chunk function in src/demuxers/demux_real.c in xine-lib prior to 1.1.15 allows remote malicious users to execute arbitrary code via a crafted Real Media file. NOTE: some of these details are obtained from third party information.
Xine Xine 1.1.2Xine Xine 1.1.1Xine Xine 1.1.0Xine Xine 1Xine Xine 1.1.3Xine Xine 0.9.13Xine Xine 1.1.11Xine Xine 1.0.3aXine Xine 1.0.2Xine XineXine Xine 1.1.11.1Xine Xine 1.1.10.1Xine Xine 1.0.1Xine Xine 1.0
632
VMScore
CVE-2008-5238
Integer overflow in the real_parse_mdpr function in demux_real.c in xine-lib 1.1.12, and other versions prior to 1.1.15, allows remote malicious users to cause a denial of service (crash) or possibly execute arbitrary code via a crafted stream_name_size field.
Xine Xine 1.0.1Xine Xine 1.0Xine Xine 1Xine Xine 1.1.1Xine Xine 1.1.0Xine Xine 1.1.11.1Xine Xine 1.1.10.1Xine Xine 1.1.3Xine Xine 1.1.2Xine Xine 0.9.13Xine Xine 1.1.11Xine Xine 1.0.3aXine Xine 1.0.2Xine XineXine Xine 1.1.4
828
VMScore
CVE-2008-5236
Multiple heap-based buffer overflows in xine-lib 1.1.12, and other 1.1.15 and previous versions versions, allow remote malicious users to execute arbitrary code via vectors related to (1) a crafted EBML element length processed by the parse_block_group function in demux_matroska....
Xine Xine 1.1.1Xine Xine 1.1.0Xine Xine 1Xine Xine 1.1.10.1Xine Xine 1.1.4Xine Xine 1.0.1Xine Xine 1.0Xine Xine 1.0.3aXine Xine 1.0.2Xine XineXine Xine 1.1.3Xine Xine 1.1.2Xine Xine 0.9.13Xine Xine 1.1.11Xine Xine 1.1.11.1
890
VMScore
CVE-2008-5237
Multiple integer overflows in xine-lib 1.1.12, and other 1.1.15 and previous versions versions, allow remote malicious users to cause a denial of service (crash) or possibly execute arbitrary code via (1) crafted width and height values that are not validated by the mymng_process...
Xine Xine 1.0.3aXine Xine 1.0.2Xine Xine 1Xine Xine 1.1.4Xine XineXine Xine 1.1.3Xine Xine 1.1.2Xine Xine 0.9.13Xine Xine 1.1.11Xine Xine 1.0.1Xine Xine 1.0Xine Xine 1.1.1Xine Xine 1.1.0Xine Xine 1.1.11.1Xine Xine 1.1.10.1
445
VMScore
CVE-2009-1274
Integer overflow in the qt_error parse_trak_atom function in demuxers/demux_qt.c in xine-lib 1.1.16.2 and previous versions allows remote malicious users to execute arbitrary code via a Quicktime movie file with a large count value in an STTS atom, which triggers a heap-based buf...
Xine Xine-lib 1.1.11Xine Xine-lib 1.1.11.1Xine Xine-lib 1.1.10Xine Xine-lib 1.1.14Xine Xine-lib 1.1.13Xine Xine-lib 1.1.16.1Xine Xine-lib 1.1.16.2Xine Xine-lib 1.1.15Xine Xine-lib 1.1.12Xine Xine-lib 1.1.1Xine Xine-lib 1.1.10.1Xine Xine-lib 1.1.0
383
VMScore
CVE-2008-3231
xine-lib prior to 1.1.15 allows remote malicious users to cause a denial of service (crash) via a crafted OGG file, as demonstrated by playing lol-ffplay.ogg with xine.
Xine Xine-lib 1.1.1Xine Xine-lib 1.1.0Xine Xine-lib 1.1.13Xine Xine-lib 1.1.2Xine Xine-lib 1.1.4Xine Xine-lib 1.1.5Xine Xine-lib 1Xine Xine-lib 1.0.2Xine Xine-lib 1.0.1Xine Xine-lib 1.1.10.1Xine Xine-lib 1.1.11.1Xine Xine-lib 1.1.8Xine Xine-lib 1.1.9Xine Xine-lib 0.99Xine Xine-lib 1.0.3aXine Xine-lib 1.1.3Xine Xine-lib 1.1.12Xine Xine-lib 1.1.6Xine Xine-lib 1.1.7Xine Xine-lib 0.9.8Xine Xine-lib 0.9.13Xine Xine-lib 1.0
828
VMScore
CVE-2008-5234
Multiple heap-based buffer overflows in xine-lib 1.1.12, and other versions prior to 1.1.15, allow remote malicious users to execute arbitrary code via vectors related to (1) a crafted metadata atom size processed by the parse_moov_atom function in demux_qt.c and (2) frame readin...
Xine Xine-lib 1.1.11.1Xine Xine-lib 1.1.11Xine Xine-lib 1.1.10.1Xine Xine-lib 1.1.5Xine Xine-lib 1.1.4Xine Xine-lib 1.0.1Xine Xine-lib 1.0Xine Xine-lib 1Xine Xine-lib 1 Beta10Xine Xine-lib 1 Beta9Xine Xine-lib 1 Beta2Xine Xine-lib 1 Beta1Xine Xine-libXine Xine-lib 1.1.12Xine Xine-lib 1.1.7Xine Xine-lib 1.1.6Xine Xine-lib 1.1.0Xine Xine-lib 1.0.2Xine Xine-lib 1 Beta12Xine Xine-lib 1 Beta11Xine Xine-lib 1 Beta4Xine Xine-lib 1 Beta3
828
VMScore
CVE-2008-5245
xine-lib prior to 1.1.15 performs V4L video frame preallocation before ascertaining the required length, which has unknown impact and attack vectors, possibly related to a buffer overflow in the open_video_capture_device function in src/input/input_v4l.c.
Xine Xine-lib 1.1.9Xine Xine-lib 1.1.9.1Xine Xine-lib 1.1.2Xine Xine-lib 1.1.1Xine Xine-lib 1Xine Xine-lib 1 Beta7Xine Xine-lib 1 Beta6Xine Xine-lib 1.1.11.1Xine Xine-lib 1.1.11Xine Xine-lib 1.1.6Xine Xine-lib 1.1.5Xine Xine-lib 1.0.2Xine Xine-lib 1.0.1Xine Xine-lib 1 Beta11Xine Xine-lib 1 Beta10Xine Xine-lib 1 Beta3Xine Xine-lib 1 Beta2Xine Xine-lib 1.1.13Xine Xine-lib 1.1.12Xine Xine-lib 1.1.8Xine Xine-lib 1.1.7Xine Xine-lib 1.0.3a
383
VMScore
CVE-2008-5233
xine-lib 1.1.12, and other versions prior to 1.1.15, does not check for failure of malloc in circumstances including (1) the mymng_process_header function in demux_mng.c, (2) the open_mod_file function in demux_mod.c, and (3) frame_buffer allocation in the real_parse_audio_specif...
Xine Xine-lib 1.1.10.1Xine Xine-lib 1.1.10Xine Xine-lib 1.1.4Xine Xine-lib 1.1.3Xine Xine-lib 1.0Xine Xine-lib 1Xine Xine-lib 1.1.11.1Xine Xine-lib 1.1.11Xine Xine-lib 1.1.6Xine Xine-lib 1.1.5Xine Xine-lib 1.0.2Xine Xine-lib 1.0.1Xine Xine-lib 1 Beta11Xine Xine-lib 1 Beta10Xine Xine-lib 1 Beta3Xine Xine-lib 1 Beta2Xine Xine-lib 1.1.13Xine Xine-libXine Xine-lib 1.1.12Xine Xine-lib 1.1.8Xine Xine-lib 1.1.7Xine Xine-lib 1.0.3a
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3581reflected XSSCVE-2024-26925CVE-2024-27956LFICVE-2024-3607CVE-2024-3107CVE-2024-3295SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook