Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

xine xine-lib 0.9.8 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2008-3231
xine-lib prior to 1.1.15 allows remote malicious users to cause a denial of service (crash) via a crafted OGG file, as demonstrated by playing lol-ffplay.ogg with xine.
Xine Xine-lib 1.1.1Xine Xine-lib 1.1.0Xine Xine-lib 1.1.13Xine Xine-lib 1.1.2Xine Xine-lib 1.1.4Xine Xine-lib 1.1.5Xine Xine-lib 1Xine Xine-lib 1.0.2Xine Xine-lib 1.0.1Xine Xine-lib 1.1.10.1Xine Xine-lib 1.1.11.1Xine Xine-lib 1.1.8Xine Xine-lib 1.1.9Xine Xine-lib 0.99Xine Xine-lib 1.0.3aXine Xine-lib 1.1.3Xine Xine-lib 1.1.12Xine Xine-lib 1.1.6Xine Xine-lib 1.1.7Xine Xine-lib 0.9.8Xine Xine-lib 0.9.13Xine Xine-lib 1.0
7.5
CVSSv2
CVE-2004-1379
Heap-based buffer overflow in the DVD subpicture decoder in xine xine-lib 1-rc5 and previous versions allows remote malicious users to execute arbitrary code via a (1) DVD or (2) MPEG subpicture header where the second field reuses RLE data from the end of the first field.
Xine Xine-lib 0.9.8Xine Xine-lib 1 Beta7Xine Xine-lib 1 Beta8Xine Xine-lib 1 Rc3cXine Xine-lib 1 Rc4Xine Xine 1 Beta2Xine Xine 1 Beta3Xine Xine 1 Rc0Xine Xine 1 Rc0aXine Xine-lib 1 Beta3Xine Xine-lib 1 Beta4Xine Xine-lib 1 Rc1Xine Xine-lib 1 Rc2Xine Xine 1 Beta1Xine Xine 1 Beta10Xine Xine 1 Beta6Xine Xine 1 Beta7Xine Xine 1 Rc3Xine Xine 1 Rc3aXine Xine 1 Rc3bXine Xine-lib 1 Beta12Xine Xine-lib 1 Beta2
7.5
CVSSv2
CVE-2005-2967
Format string vulnerability in input_cdda.c in xine-lib 1-beta through 1-beta 3, 1-rc, 1.0 up to and including 1.0.2, and 1.1.1 allows remote servers to execute arbitrary code via format string specifiers in metadata in CDDB server responses when the victim plays a CD.
Xine Xine-lib 1.0Xine Xine-lib 1.0.1Xine Xine-lib 0.9.13Xine Xine-lib 1.0.2Xine Xine-lib 1.1.0
10
CVSSv2
CVE-2004-1188
The pnm_get_chunk function in xine 0.99.2 and previous versions, and other packages such as MPlayer that use the same code, does not properly verify that the chunk size is less than the PREAMBLE_SIZE, which causes a read operation with a negative length that leads to a buffer ove...
Mplayer Mplayer 0.92Mplayer Mplayer 0.92.1Mplayer Mplayer 1.0 Pre5Mplayer Mplayer 1.0 Pre5try1Xine Xine-lib 1 Beta1Xine Xine-lib 1 Beta10Xine Xine-lib 1 Beta7Xine Xine-lib 1 Beta8Xine Xine-lib 1 Rc3bXine Xine-lib 1 Rc3cXine Xine 0.9.18Xine Xine 0.9.8Xine Xine 1 Beta4Xine Xine 1 Beta5Xine Xine 1 Rc1Xine Xine 1 Rc2Xine Xine 1 Rc6aXine Xine 1 Rc7Mplayer Mplayer 0.90Mplayer Mplayer 0.90 PreMplayer Mplayer 1.0 Pre2Mplayer Mplayer 1.0 Pre3
10
CVSSv2
CVE-2004-1187
Heap-based buffer overflow in the pnm_get_chunk function for xine 0.99.2, and other packages such as MPlayer that use the same code, allows remote malicious users to execute arbitrary code via long PNA_TAG values, a different vulnerability than CVE-2004-1188.
Mplayer Mplayer 0.90 PreMplayer Mplayer 0.90 RcMplayer Mplayer 1.0 Pre2Mplayer Mplayer 1.0 Pre3Xine Xine-lib 0.9.8Xine Xine-lib 0.99Xine Xine-lib 1 Beta3Xine Xine-lib 1 Beta4Xine Xine-lib 1 Rc1Xine Xine-lib 1 Rc2Xine Xine-lib 1 Rc6aXine Xine-lib 1 Rc7Xine Xine 1 Beta11Xine Xine 1 Beta12Xine Xine 1 Beta8Xine Xine 1 Beta9Xine Xine 1 Rc0Xine Xine 1 Rc4Xine Xine 1 Rc5Mplayer Mplayer 0.90Mplayer Mplayer 0.92 CvsMplayer Mplayer 1.0 Pre1
9.3
CVSSv2
CVE-2008-1686
Array index vulnerability in Speex 1.1.12 and previous versions, as used in libfishsound 0.9.0 and previous versions, including Illiminable DirectShow Filters and Annodex Plugins for Firefox, xine-lib prior to 1.1.12, and many other products, allows remote malicious users to exec...
Xine Xine-lib 1.1.10Xine Xine-lib 1.1.1Xine Xine-lib 0.9.8Xine Xine-lib 0.9.13Xine Xine-libXine Xine-lib 1.1.10.1Xine Xine-lib 1.0Xine Xine-lib 0.99Xine Xine-lib 1.1.0Xine Xine-lib 1.0.3aXine Xine-lib 1.1.11Xine Xine-lib 1.0.2Xine Xine-lib 1.0.1Xiph Speex 1.1.9Xiph Speex 1.1.8Xiph Speex 1.0.5Xiph Speex 1.0.3Xiph Speex 1.1.2Xiph Speex 1.1.11Xiph Speex 1.1.10Xiph Speex 1.1.4Xiph Speex 1.1.3
5
CVSSv2
CVE-2004-1951
xine 1.x alpha, 1.x beta, and 1.0rc up to and including 1.0rc3a, and xine-ui 0.9.21 to 0.9.23 allows remote malicious users to overwrite arbitrary files via the (1) audio.sun_audio_device or (2) dxr3.devicename options in an MRL link.
Xine Xine-lib 1 Rc3aXine Xine-lib 1 Rc3bXine Xine 1 Beta10Xine Xine 1 Beta11Xine Xine 1 Beta7Xine Xine 1 Beta8Xine Xine 1 Rc3bXine Xine-lib 1 Rc2Xine Xine 0.9.13Xine Xine 0.9.8Xine Xine 1 Beta1Xine Xine 1 Beta5Xine Xine 1 Beta6Xine Xine 1 Rc3Xine Xine 1 Rc3aXine Xine-lib 1 Rc3cXine Xine-ui 0.9.21Xine Xine 1 Beta12Xine Xine 1 Beta2Xine Xine 1 Beta9Xine Xine 1 Rc0aXine Xine-ui 0.9.22
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-26925CVE-2023-41826LFICVE-2022-22364CVE-2024-2887command injectionremote code executionCVE-2024-34446CVE-2022-48699
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook