Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

xine xine-lib 1.1.14 vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2009-1274
Integer overflow in the qt_error parse_trak_atom function in demuxers/demux_qt.c in xine-lib 1.1.16.2 and previous versions allows remote malicious users to execute arbitrary code via a Quicktime movie file with a large count value in an STTS atom, which triggers a heap-based buf...
Xine Xine-lib 1.1.11Xine Xine-lib 1.1.11.1Xine Xine-lib 1.1.10Xine Xine-lib 1.1.14Xine Xine-lib 1.1.13Xine Xine-lib 1.1.16.1Xine Xine-lib 1.1.16.2Xine Xine-lib 1.1.15Xine Xine-lib 1.1.12Xine Xine-lib 1.1.1Xine Xine-lib 1.1.10.1Xine Xine-lib 1.1.0
4.3
CVSSv2
CVE-2008-5247
The real_parse_audio_specific_data function in demux_real.c in xine-lib 1.1.12, and other 1.1.15 and previous versions versions, uses an untrusted height (aka codec_data_length) value as a divisor, which allow remote malicious users to cause a denial of service (divide-by-zero er...
Xine Xine-lib 1.1.13Xine Xine-lib 1.1.12Xine Xine-lib 1.1.7Xine Xine-lib 1.1.6Xine Xine-lib 1.1.10.1Xine Xine-lib 1.1.10Xine Xine-lib 1.1.9Xine Xine-lib 1.1.3Xine Xine-lib 1.1.2Xine Xine-lib 1Xine Xine-lib 1 Beta8Xine Xine-lib 1 Beta7Xine Xine-lib 0.9.13Xine Xine-lib 1.1.14Xine Xine-lib 1.1.0Xine Xine-lib 1.0.2Xine Xine-lib 1 Beta12Xine Xine-lib 1 Beta11Xine Xine-lib 1 Beta4Xine Xine-lib 1 Beta3Xine Xine-lib 1.1.9.1Xine Xine-lib 1.1.8
4.3
CVSSv2
CVE-2008-5240
xine-lib 1.1.12, and other 1.1.15 and previous versions versions, relies on an untrusted input value to determine the memory allocation and does not check the result for (1) the MATROSKA_ID_TR_CODECPRIVATE track entry element processed by demux_matroska.c; and (2) PROP_TAG, (3) M...
Xine Xine-lib 1.1.12Xine Xine-lib 1.1.11.1Xine Xine-lib 1.1.6Xine Xine-lib 1.1.5Xine Xine-lib 1.0.2Xine Xine-lib 1.0.1Xine Xine-lib 1Xine Xine-lib 1.1.10Xine Xine-lib 1.1.9Xine Xine-lib 1.1.9.1Xine Xine-lib 1.1.2Xine Xine-lib 1.1.1Xine Xine-lib 1.1.11Xine Xine-lib 1.1.10.1Xine Xine-lib 1.1.4Xine Xine-lib 1.1.3Xine Xine-lib 1.0Xine Xine-lib 1 Beta9Xine Xine-lib 1 Beta8Xine Xine-lib 1 Beta1Xine Xine-lib 0.9.13Xine Xine-lib 1 Beta11
4.3
CVSSv2
CVE-2008-5241
Integer underflow in demux_qt.c in xine-lib 1.1.12, and other 1.1.15 and previous versions versions, allows remote malicious users to cause a denial of service (crash) via a crafted media file that results in a small value of moov_atom_size in a compressed MOV (aka CMOV_ATOM).
Xine Xine-lib 1.1.13Xine Xine-lib 1.1.9.1Xine Xine-lib 1.1.8Xine Xine-lib 1.0.3aXine Xine-lib 1.1.0Xine Xine-lib 1Xine Xine-lib 1 Beta5Xine Xine-lib 1 Beta4Xine Xine-lib 1.1.11Xine Xine-lib 1.1.10.1Xine Xine-lib 1.1.4Xine Xine-lib 1.1.3Xine Xine-lib 1.0Xine Xine-lib 1 Beta9Xine Xine-lib 1 Beta8Xine Xine-lib 1 Beta1Xine Xine-lib 0.9.13Xine Xine-lib 1.1.10Xine Xine-lib 1.1.9Xine Xine-lib 1.1.2Xine Xine-lib 1.1.1Xine Xine-lib 1 Beta7
6.8
CVSSv2
CVE-2008-5242
demux_qt.c in xine-lib 1.1.12, and other 1.1.15 and previous versions versions, does not validate the count field before calling calloc for STSD_ATOM atom allocation, which allows remote malicious users to cause a denial of service (crash) or possibly execute arbitrary code via a...
Xine Xine-lib 1.1.10.1Xine Xine-lib 1.1.10Xine Xine-lib 1.1.4Xine Xine-lib 1.1.3Xine Xine-lib 1.0Xine Xine-lib 1Xine Xine-lib 1 Beta9Xine Xine-lib 1 Beta8Xine Xine-lib 1 Beta1Xine Xine-lib 0.9.13Xine Xine-lib 1.1.14Xine Xine-lib 1.1.11.1Xine Xine-lib 1.1.11Xine Xine-lib 1.1.6Xine Xine-lib 1.1.5Xine Xine-lib 1.0.2Xine Xine-lib 1.0.1Xine Xine-lib 1 Beta11Xine Xine-lib 1 Beta10Xine Xine-lib 1 Beta3Xine Xine-lib 1 Beta2Xine Xine-lib 1.1.9
4.3
CVSSv2
CVE-2008-5243
The real_parse_headers function in demux_real.c in xine-lib 1.1.12, and other 1.1.15 and previous versions versions, relies on an untrusted input length value to "reindex into an allocated buffer," which allows remote malicious users to cause a denial of service (crash)...
Xine Xine-lib 1.1.10.1Xine Xine-lib 1.1.10Xine Xine-lib 1.1.4Xine Xine-lib 1.1.3Xine Xine-lib 1Xine Xine-lib 1 Beta9Xine Xine-lib 1 Beta8Xine Xine-lib 0.9.13Xine Xine-lib 1.1.14Xine Xine-lib 1.1.11.1Xine Xine-lib 1.1.11Xine Xine-lib 1.1.6Xine Xine-lib 1.1.5Xine Xine-lib 1.0.2Xine Xine-lib 1.0.1Xine Xine-lib 1.0Xine Xine-lib 1 Beta11Xine Xine-lib 1 Beta10Xine Xine-lib 1 Beta3Xine Xine-lib 1 Beta2Xine Xine-lib 1 Beta1Xine Xine-lib 1.1.9
10
CVSSv2
CVE-2008-5244
Unspecified vulnerability in xine-lib prior to 1.1.15 has unknown impact and attack vectors related to libfaad. NOTE: due to the lack of details, it is not clear whether this is an issue in xine-lib or in libfaad.
Xine Xine-lib 1.1.10.1Xine Xine-lib 1.1.10Xine Xine-lib 1.1.4Xine Xine-lib 1.1.3Xine Xine-lib 1Xine Xine-lib 1 Beta9Xine Xine-lib 1 Beta8Xine Xine-lib 0.9.13Xine Xine-lib 1.1.14Xine Xine-lib 1.1.11.1Xine Xine-lib 1.1.11Xine Xine-lib 1.1.6Xine Xine-lib 1.1.5Xine Xine-lib 1.0.1Xine Xine-lib 1.0Xine Xine-lib 1 Beta11Xine Xine-lib 1 Beta10Xine Xine-lib 1 Beta2Xine Xine-lib 1 Beta1Xine Xine-lib 1.1.9Xine Xine-lib 1.1.9.1Xine Xine-lib 1.1.2
4.3
CVSSv2
CVE-2008-5248
xine-lib prior to 1.1.15 allows remote malicious users to cause a denial of service (crash) via "MP3 files with metadata consisting only of separators."
Xine Xine-lib 1.1.10.1Xine Xine-lib 1.1.10Xine Xine-lib 1.1.3Xine Xine-lib 1.1.13Xine Xine-lib 1.1.12Xine Xine-lib 1.1.8Xine Xine-lib 1.1.7Xine Xine-lib 1.1.6Xine Xine-lib 1.1.0Xine Xine-lib 1.0.2Xine Xine-lib 1Xine Xine-lib 1 Beta12Xine Xine-lib 1 Beta11Xine Xine-lib 1 Beta4Xine Xine-lib 1 Beta3Xine Xine-lib 1.1.2Xine Xine-lib 1 Beta8Xine Xine-lib 1 Beta7Xine Xine-lib 0.9.13Xine Xine-lib 1.1.14Xine Xine-lib 1.1.9Xine Xine-lib 1.1.9.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-26925CVE-2023-41826LFICVE-2022-22364CVE-2024-2887command injectionremote code executionCVE-2024-34446CVE-2022-48699
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook