Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

xine xine-lib 1.1.10 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2008-1878
Stack-based buffer overflow in the demux_nsf_send_chunk function in src/demuxers/demux_nsf.c in xine-lib 1.1.12 and previous versions allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a long NSF title.
Xine Xine-lib 1.1.9Xine Xine-libXine Xine-lib 1.1.0Xine Xine-lib 1.1.1Xine Xine-lib 1.1.10Xine Xine-lib 1.1.10.1Xine Xine-lib 1.1.11Xine Xine-lib 1.1.11.1
NA
CVE-2009-1274
Integer overflow in the qt_error parse_trak_atom function in demuxers/demux_qt.c in xine-lib 1.1.16.2 and previous versions allows remote malicious users to execute arbitrary code via a Quicktime movie file with a large count value in an STTS atom, which triggers a heap-based buf...
Xine Xine-lib 1.1.11Xine Xine-lib 1.1.11.1Xine Xine-lib 1.1.10Xine Xine-lib 1.1.14Xine Xine-lib 1.1.13Xine Xine-lib 1.1.16.1Xine Xine-lib 1.1.16.2Xine Xine-lib 1.1.15Xine Xine-lib 1.1.12Xine Xine-lib 1.1.1Xine Xine-lib 1.1.10.1Xine Xine-lib 1.1.0
NA
CVE-2008-3231
xine-lib prior to 1.1.15 allows remote malicious users to cause a denial of service (crash) via a crafted OGG file, as demonstrated by playing lol-ffplay.ogg with xine.
Xine Xine-lib 1.1.1Xine Xine-lib 1.1.0Xine Xine-lib 1.1.13Xine Xine-lib 1.1.2Xine Xine-lib 1.1.4Xine Xine-lib 1.1.5Xine Xine-lib 1Xine Xine-lib 1.0.2Xine Xine-lib 1.0.1Xine Xine-lib 1.1.10.1Xine Xine-lib 1.1.11.1Xine Xine-lib 1.1.8Xine Xine-lib 1.1.9Xine Xine-lib 0.99Xine Xine-lib 1.0.3aXine Xine-lib 1.1.3Xine Xine-lib 1.1.12Xine Xine-lib 1.1.6Xine Xine-lib 1.1.7Xine Xine-lib 0.9.8Xine Xine-lib 0.9.13Xine Xine-lib 1.0
NA
CVE-2008-5233
xine-lib 1.1.12, and other versions prior to 1.1.15, does not check for failure of malloc in circumstances including (1) the mymng_process_header function in demux_mng.c, (2) the open_mod_file function in demux_mod.c, and (3) frame_buffer allocation in the real_parse_audio_specif...
Xine Xine-lib 1.1.10.1Xine Xine-lib 1.1.10Xine Xine-lib 1.1.4Xine Xine-lib 1.1.3Xine Xine-lib 1.0Xine Xine-lib 1Xine Xine-lib 1.1.11.1Xine Xine-lib 1.1.11Xine Xine-lib 1.1.6Xine Xine-lib 1.1.5Xine Xine-lib 1.0.2Xine Xine-lib 1.0.1Xine Xine-lib 1 Beta11Xine Xine-lib 1 Beta10Xine Xine-lib 1 Beta3Xine Xine-lib 1 Beta2Xine Xine-lib 1.1.13Xine Xine-libXine Xine-lib 1.1.12Xine Xine-lib 1.1.8Xine Xine-lib 1.1.7Xine Xine-lib 1.0.3a
NA
CVE-2008-5245
xine-lib prior to 1.1.15 performs V4L video frame preallocation before ascertaining the required length, which has unknown impact and attack vectors, possibly related to a buffer overflow in the open_video_capture_device function in src/input/input_v4l.c.
Xine Xine-lib 1.1.9Xine Xine-lib 1.1.9.1Xine Xine-lib 1.1.2Xine Xine-lib 1.1.1Xine Xine-lib 1Xine Xine-lib 1 Beta7Xine Xine-lib 1 Beta6Xine Xine-lib 1.1.11.1Xine Xine-lib 1.1.11Xine Xine-lib 1.1.6Xine Xine-lib 1.1.5Xine Xine-lib 1.0.2Xine Xine-lib 1.0.1Xine Xine-lib 1 Beta11Xine Xine-lib 1 Beta10Xine Xine-lib 1 Beta3Xine Xine-lib 1 Beta2Xine Xine-lib 1.1.13Xine Xine-lib 1.1.12Xine Xine-lib 1.1.8Xine Xine-lib 1.1.7Xine Xine-lib 1.0.3a
NA
CVE-2008-5234
Multiple heap-based buffer overflows in xine-lib 1.1.12, and other versions prior to 1.1.15, allow remote malicious users to execute arbitrary code via vectors related to (1) a crafted metadata atom size processed by the parse_moov_atom function in demux_qt.c and (2) frame readin...
Xine Xine-lib 1.1.11.1Xine Xine-lib 1.1.11Xine Xine-lib 1.1.10.1Xine Xine-lib 1.1.5Xine Xine-lib 1.1.4Xine Xine-lib 1.0.1Xine Xine-lib 1.0Xine Xine-lib 1Xine Xine-lib 1 Beta10Xine Xine-lib 1 Beta9Xine Xine-lib 1 Beta2Xine Xine-lib 1 Beta1Xine Xine-libXine Xine-lib 1.1.12Xine Xine-lib 1.1.7Xine Xine-lib 1.1.6Xine Xine-lib 1.1.0Xine Xine-lib 1.0.2Xine Xine-lib 1 Beta12Xine Xine-lib 1 Beta11Xine Xine-lib 1 Beta4Xine Xine-lib 1 Beta3
NA
CVE-2008-5246
Multiple heap-based buffer overflows in xine-lib prior to 1.1.15 allow remote malicious users to execute arbitrary code via vectors that send ID3 data to the (1) id3v22_interp_frame and (2) id3v24_interp_frame functions in src/demuxers/id3.c. NOTE: the provenance of this informat...
Xine Xine-lib 1.1.10Xine Xine-lib 1.1.9Xine Xine-lib 1.1.3Xine Xine-lib 1.1.2Xine Xine-lib 1Xine Xine-lib 1 Beta8Xine Xine-lib 1 Beta7Xine Xine-lib 0.9.13Xine Xine-libXine Xine-lib 1.1.13Xine Xine-lib 1.1.12Xine Xine-lib 1.1.11.1Xine Xine-lib 1.1.7Xine Xine-lib 1.1.6Xine Xine-lib 1.1.0Xine Xine-lib 1.0.2Xine Xine-lib 1 Beta12Xine Xine-lib 1 Beta11Xine Xine-lib 1 Beta4Xine Xine-lib 1 Beta3Xine Xine-lib 1.1.9.1Xine Xine-lib 1.1.8
NA
CVE-2008-5239
xine-lib 1.1.12, and other 1.1.15 and previous versions versions, does not properly handle (a) negative and (b) zero values during unspecified read function calls in input_file.c, input_net.c, input_smb.c, and input_http.c, which allows remote malicious users to cause a denial of...
Xine Xine-lib 1.1.13Xine Xine-lib 1.1.9.1Xine Xine-lib 1.1.8Xine Xine-lib 1.1.7Xine Xine-lib 1.0.3aXine Xine-lib 1.1.0Xine Xine-lib 1Xine Xine-lib 1 Beta12Xine Xine-lib 1 Beta5Xine Xine-lib 1 Beta4Xine Xine-lib 1.1.11Xine Xine-lib 1.1.10.1Xine Xine-lib 1.1.4Xine Xine-lib 1.1.3Xine Xine-lib 1.0Xine Xine-lib 1 Beta9Xine Xine-lib 1 Beta8Xine Xine-lib 1 Beta1Xine Xine-lib 0.9.13Xine Xine-lib 1.1.12Xine Xine-lib 1.1.11.1Xine Xine-lib 1.1.6
NA
CVE-2008-5241
Integer underflow in demux_qt.c in xine-lib 1.1.12, and other 1.1.15 and previous versions versions, allows remote malicious users to cause a denial of service (crash) via a crafted media file that results in a small value of moov_atom_size in a compressed MOV (aka CMOV_ATOM).
Xine Xine-lib 1.1.13Xine Xine-lib 1.1.9.1Xine Xine-lib 1.1.8Xine Xine-lib 1.0.3aXine Xine-lib 1.1.0Xine Xine-lib 1Xine Xine-lib 1 Beta5Xine Xine-lib 1 Beta4Xine Xine-lib 1.1.11Xine Xine-lib 1.1.10.1Xine Xine-lib 1.1.4Xine Xine-lib 1.1.3Xine Xine-lib 1.0Xine Xine-lib 1 Beta9Xine Xine-lib 1 Beta8Xine Xine-lib 1 Beta1Xine Xine-lib 0.9.13Xine Xine-lib 1.1.10Xine Xine-lib 1.1.9Xine Xine-lib 1.1.2Xine Xine-lib 1.1.1Xine Xine-lib 1 Beta7
NA
CVE-2008-5248
xine-lib prior to 1.1.15 allows remote malicious users to cause a denial of service (crash) via "MP3 files with metadata consisting only of separators."
Xine Xine-lib 1.1.10.1Xine Xine-lib 1.1.10Xine Xine-lib 1.1.3Xine Xine-lib 1.1.13Xine Xine-lib 1.1.12Xine Xine-lib 1.1.8Xine Xine-lib 1.1.7Xine Xine-lib 1.1.6Xine Xine-lib 1.1.0Xine Xine-lib 1.0.2Xine Xine-lib 1Xine Xine-lib 1 Beta12Xine Xine-lib 1 Beta11Xine Xine-lib 1 Beta4Xine Xine-lib 1 Beta3Xine Xine-lib 1.1.2Xine Xine-lib 1 Beta8Xine Xine-lib 1 Beta7Xine Xine-lib 0.9.13Xine Xine-lib 1.1.14Xine Xine-lib 1.1.9Xine Xine-lib 1.1.9.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversalCVE-2024-26978CVE-2024-26982wirelessCVE-2023-6949CVE-2024-26980CVE-2024-32766CVE-2024-26939cache poisoning
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook