Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

xine xine-lib 1.1.9 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2008-1878
Stack-based buffer overflow in the demux_nsf_send_chunk function in src/demuxers/demux_nsf.c in xine-lib 1.1.12 and previous versions allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a long NSF title.
Xine Xine-lib 1.1.9Xine Xine-libXine Xine-lib 1.1.0Xine Xine-lib 1.1.1Xine Xine-lib 1.1.10Xine Xine-lib 1.1.10.1Xine Xine-lib 1.1.11Xine Xine-lib 1.1.11.1
4.3
CVSSv2
CVE-2008-3231
xine-lib prior to 1.1.15 allows remote malicious users to cause a denial of service (crash) via a crafted OGG file, as demonstrated by playing lol-ffplay.ogg with xine.
Xine Xine-lib 1.1.1Xine Xine-lib 1.1.0Xine Xine-lib 1.1.13Xine Xine-lib 1.1.2Xine Xine-lib 1.1.4Xine Xine-lib 1.1.5Xine Xine-lib 1Xine Xine-lib 1.0.2Xine Xine-lib 1.0.1Xine Xine-lib 1.1.10.1Xine Xine-lib 1.1.11.1Xine Xine-lib 1.1.8Xine Xine-lib 1.1.9Xine Xine-lib 0.99Xine Xine-lib 1.0.3aXine Xine-lib 1.1.3Xine Xine-lib 1.1.12Xine Xine-lib 1.1.6Xine Xine-lib 1.1.7Xine Xine-lib 0.9.8Xine Xine-lib 0.9.13Xine Xine-lib 1.0
9.3
CVSSv2
CVE-2008-5245
xine-lib prior to 1.1.15 performs V4L video frame preallocation before ascertaining the required length, which has unknown impact and attack vectors, possibly related to a buffer overflow in the open_video_capture_device function in src/input/input_v4l.c.
Xine Xine-lib 1.1.9Xine Xine-lib 1.1.9.1Xine Xine-lib 1.1.2Xine Xine-lib 1.1.1Xine Xine-lib 1Xine Xine-lib 1 Beta7Xine Xine-lib 1 Beta6Xine Xine-lib 1.1.11.1Xine Xine-lib 1.1.11Xine Xine-lib 1.1.6Xine Xine-lib 1.1.5Xine Xine-lib 1.0.2Xine Xine-lib 1.0.1Xine Xine-lib 1 Beta11Xine Xine-lib 1 Beta10Xine Xine-lib 1 Beta3Xine Xine-lib 1 Beta2Xine Xine-lib 1.1.13Xine Xine-lib 1.1.12Xine Xine-lib 1.1.8Xine Xine-lib 1.1.7Xine Xine-lib 1.0.3a
4.3
CVSSv2
CVE-2008-5233
xine-lib 1.1.12, and other versions prior to 1.1.15, does not check for failure of malloc in circumstances including (1) the mymng_process_header function in demux_mng.c, (2) the open_mod_file function in demux_mod.c, and (3) frame_buffer allocation in the real_parse_audio_specif...
Xine Xine-lib 1.1.10.1Xine Xine-lib 1.1.10Xine Xine-lib 1.1.4Xine Xine-lib 1.1.3Xine Xine-lib 1.0Xine Xine-lib 1Xine Xine-lib 1.1.11.1Xine Xine-lib 1.1.11Xine Xine-lib 1.1.6Xine Xine-lib 1.1.5Xine Xine-lib 1.0.2Xine Xine-lib 1.0.1Xine Xine-lib 1 Beta11Xine Xine-lib 1 Beta10Xine Xine-lib 1 Beta3Xine Xine-lib 1 Beta2Xine Xine-lib 1.1.13Xine Xine-libXine Xine-lib 1.1.12Xine Xine-lib 1.1.8Xine Xine-lib 1.1.7Xine Xine-lib 1.0.3a
9.3
CVSSv2
CVE-2008-5234
Multiple heap-based buffer overflows in xine-lib 1.1.12, and other versions prior to 1.1.15, allow remote malicious users to execute arbitrary code via vectors related to (1) a crafted metadata atom size processed by the parse_moov_atom function in demux_qt.c and (2) frame readin...
Xine Xine-lib 1.1.11.1Xine Xine-lib 1.1.11Xine Xine-lib 1.1.10.1Xine Xine-lib 1.1.5Xine Xine-lib 1.1.4Xine Xine-lib 1.0.1Xine Xine-lib 1.0Xine Xine-lib 1Xine Xine-lib 1 Beta10Xine Xine-lib 1 Beta9Xine Xine-lib 1 Beta2Xine Xine-lib 1 Beta1Xine Xine-libXine Xine-lib 1.1.12Xine Xine-lib 1.1.7Xine Xine-lib 1.1.6Xine Xine-lib 1.1.0Xine Xine-lib 1.0.2Xine Xine-lib 1 Beta12Xine Xine-lib 1 Beta11Xine Xine-lib 1 Beta4Xine Xine-lib 1 Beta3
9.3
CVSSv2
CVE-2008-5246
Multiple heap-based buffer overflows in xine-lib prior to 1.1.15 allow remote malicious users to execute arbitrary code via vectors that send ID3 data to the (1) id3v22_interp_frame and (2) id3v24_interp_frame functions in src/demuxers/id3.c. NOTE: the provenance of this informat...
Xine Xine-lib 1.1.10Xine Xine-lib 1.1.9Xine Xine-lib 1.1.3Xine Xine-lib 1.1.2Xine Xine-lib 1Xine Xine-lib 1 Beta8Xine Xine-lib 1 Beta7Xine Xine-lib 0.9.13Xine Xine-libXine Xine-lib 1.1.13Xine Xine-lib 1.1.12Xine Xine-lib 1.1.11.1Xine Xine-lib 1.1.7Xine Xine-lib 1.1.6Xine Xine-lib 1.1.0Xine Xine-lib 1.0.2Xine Xine-lib 1 Beta12Xine Xine-lib 1 Beta11Xine Xine-lib 1 Beta4Xine Xine-lib 1 Beta3Xine Xine-lib 1.1.9.1Xine Xine-lib 1.1.8
4.3
CVSSv2
CVE-2008-5239
xine-lib 1.1.12, and other 1.1.15 and previous versions versions, does not properly handle (a) negative and (b) zero values during unspecified read function calls in input_file.c, input_net.c, input_smb.c, and input_http.c, which allows remote malicious users to cause a denial of...
Xine Xine-lib 1.1.13Xine Xine-lib 1.1.9.1Xine Xine-lib 1.1.8Xine Xine-lib 1.1.7Xine Xine-lib 1.0.3aXine Xine-lib 1.1.0Xine Xine-lib 1Xine Xine-lib 1 Beta12Xine Xine-lib 1 Beta5Xine Xine-lib 1 Beta4Xine Xine-lib 1.1.11Xine Xine-lib 1.1.10.1Xine Xine-lib 1.1.4Xine Xine-lib 1.1.3Xine Xine-lib 1.0Xine Xine-lib 1 Beta9Xine Xine-lib 1 Beta8Xine Xine-lib 1 Beta1Xine Xine-lib 0.9.13Xine Xine-lib 1.1.12Xine Xine-lib 1.1.11.1Xine Xine-lib 1.1.6
4.3
CVSSv2
CVE-2008-5247
The real_parse_audio_specific_data function in demux_real.c in xine-lib 1.1.12, and other 1.1.15 and previous versions versions, uses an untrusted height (aka codec_data_length) value as a divisor, which allow remote malicious users to cause a denial of service (divide-by-zero er...
Xine Xine-lib 1.1.13Xine Xine-lib 1.1.12Xine Xine-lib 1.1.7Xine Xine-lib 1.1.6Xine Xine-lib 1.1.10.1Xine Xine-lib 1.1.10Xine Xine-lib 1.1.9Xine Xine-lib 1.1.3Xine Xine-lib 1.1.2Xine Xine-lib 1Xine Xine-lib 1 Beta8Xine Xine-lib 1 Beta7Xine Xine-lib 0.9.13Xine Xine-lib 1.1.14Xine Xine-lib 1.1.0Xine Xine-lib 1.0.2Xine Xine-lib 1 Beta12Xine Xine-lib 1 Beta11Xine Xine-lib 1 Beta4Xine Xine-lib 1 Beta3Xine Xine-lib 1.1.9.1Xine Xine-lib 1.1.8
4.3
CVSSv2
CVE-2008-5240
xine-lib 1.1.12, and other 1.1.15 and previous versions versions, relies on an untrusted input value to determine the memory allocation and does not check the result for (1) the MATROSKA_ID_TR_CODECPRIVATE track entry element processed by demux_matroska.c; and (2) PROP_TAG, (3) M...
Xine Xine-lib 1.1.12Xine Xine-lib 1.1.11.1Xine Xine-lib 1.1.6Xine Xine-lib 1.1.5Xine Xine-lib 1.0.2Xine Xine-lib 1.0.1Xine Xine-lib 1Xine Xine-lib 1.1.10Xine Xine-lib 1.1.9Xine Xine-lib 1.1.9.1Xine Xine-lib 1.1.2Xine Xine-lib 1.1.1Xine Xine-lib 1.1.11Xine Xine-lib 1.1.10.1Xine Xine-lib 1.1.4Xine Xine-lib 1.1.3Xine Xine-lib 1.0Xine Xine-lib 1 Beta9Xine Xine-lib 1 Beta8Xine Xine-lib 1 Beta1Xine Xine-lib 0.9.13Xine Xine-lib 1 Beta11
4.3
CVSSv2
CVE-2008-5241
Integer underflow in demux_qt.c in xine-lib 1.1.12, and other 1.1.15 and previous versions versions, allows remote malicious users to cause a denial of service (crash) via a crafted media file that results in a small value of moov_atom_size in a compressed MOV (aka CMOV_ATOM).
Xine Xine-lib 1.1.13Xine Xine-lib 1.1.9.1Xine Xine-lib 1.1.8Xine Xine-lib 1.0.3aXine Xine-lib 1.1.0Xine Xine-lib 1Xine Xine-lib 1 Beta5Xine Xine-lib 1 Beta4Xine Xine-lib 1.1.11Xine Xine-lib 1.1.10.1Xine Xine-lib 1.1.4Xine Xine-lib 1.1.3Xine Xine-lib 1.0Xine Xine-lib 1 Beta9Xine Xine-lib 1 Beta8Xine Xine-lib 1 Beta1Xine Xine-lib 0.9.13Xine Xine-lib 1.1.10Xine Xine-lib 1.1.9Xine Xine-lib 1.1.2Xine Xine-lib 1.1.1Xine Xine-lib 1 Beta7
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-26925CVE-2023-41826LFICVE-2022-22364CVE-2024-2887command injectionremote code executionCVE-2024-34446CVE-2022-48699
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook