Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

xine-lib vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2008-5233
xine-lib 1.1.12, and other versions prior to 1.1.15, does not check for failure of malloc in circumstances including (1) the mymng_process_header function in demux_mng.c, (2) the open_mod_file function in demux_mod.c, and (3) frame_buffer allocation in the real_parse_audio_specif...
Xine Xine-lib 1.1.10.1Xine Xine-lib 1.1.10Xine Xine-lib 1.1.4Xine Xine-lib 1.1.3Xine Xine-lib 1.0Xine Xine-lib 1Xine Xine-lib 1.1.11.1Xine Xine-lib 1.1.11Xine Xine-lib 1.1.6Xine Xine-lib 1.1.5Xine Xine-lib 1.0.2Xine Xine-lib 1.0.1Xine Xine-lib 1 Beta11Xine Xine-lib 1 Beta10Xine Xine-lib 1 Beta3Xine Xine-lib 1 Beta2Xine Xine-lib 1.1.13Xine Xine-libXine Xine-lib 1.1.12Xine Xine-lib 1.1.8Xine Xine-lib 1.1.7Xine Xine-lib 1.0.3a
9.3
CVSSv2
CVE-2008-5234
Multiple heap-based buffer overflows in xine-lib 1.1.12, and other versions prior to 1.1.15, allow remote malicious users to execute arbitrary code via vectors related to (1) a crafted metadata atom size processed by the parse_moov_atom function in demux_qt.c and (2) frame readin...
Xine Xine-lib 1.1.11.1Xine Xine-lib 1.1.11Xine Xine-lib 1.1.10.1Xine Xine-lib 1.1.5Xine Xine-lib 1.1.4Xine Xine-lib 1.0.1Xine Xine-lib 1.0Xine Xine-lib 1Xine Xine-lib 1 Beta10Xine Xine-lib 1 Beta9Xine Xine-lib 1 Beta2Xine Xine-lib 1 Beta1Xine Xine-libXine Xine-lib 1.1.12Xine Xine-lib 1.1.7Xine Xine-lib 1.1.6Xine Xine-lib 1.1.0Xine Xine-lib 1.0.2Xine Xine-lib 1 Beta12Xine Xine-lib 1 Beta11Xine Xine-lib 1 Beta4Xine Xine-lib 1 Beta3
9.3
CVSSv2
CVE-2008-5245
xine-lib prior to 1.1.15 performs V4L video frame preallocation before ascertaining the required length, which has unknown impact and attack vectors, possibly related to a buffer overflow in the open_video_capture_device function in src/input/input_v4l.c.
Xine Xine-lib 1.1.9Xine Xine-lib 1.1.9.1Xine Xine-lib 1.1.2Xine Xine-lib 1.1.1Xine Xine-lib 1Xine Xine-lib 1 Beta7Xine Xine-lib 1 Beta6Xine Xine-lib 1.1.11.1Xine Xine-lib 1.1.11Xine Xine-lib 1.1.6Xine Xine-lib 1.1.5Xine Xine-lib 1.0.2Xine Xine-lib 1.0.1Xine Xine-lib 1 Beta11Xine Xine-lib 1 Beta10Xine Xine-lib 1 Beta3Xine Xine-lib 1 Beta2Xine Xine-lib 1.1.13Xine Xine-lib 1.1.12Xine Xine-lib 1.1.8Xine Xine-lib 1.1.7Xine Xine-lib 1.0.3a
9.3
CVSSv2
CVE-2008-5246
Multiple heap-based buffer overflows in xine-lib prior to 1.1.15 allow remote malicious users to execute arbitrary code via vectors that send ID3 data to the (1) id3v22_interp_frame and (2) id3v24_interp_frame functions in src/demuxers/id3.c. NOTE: the provenance of this informat...
Xine Xine-lib 1.1.10Xine Xine-lib 1.1.9Xine Xine-lib 1.1.3Xine Xine-lib 1.1.2Xine Xine-lib 1Xine Xine-lib 1 Beta8Xine Xine-lib 1 Beta7Xine Xine-lib 0.9.13Xine Xine-libXine Xine-lib 1.1.13Xine Xine-lib 1.1.12Xine Xine-lib 1.1.11.1Xine Xine-lib 1.1.7Xine Xine-lib 1.1.6Xine Xine-lib 1.1.0Xine Xine-lib 1.0.2Xine Xine-lib 1 Beta12Xine Xine-lib 1 Beta11Xine Xine-lib 1 Beta4Xine Xine-lib 1 Beta3Xine Xine-lib 1.1.9.1Xine Xine-lib 1.1.8
4.3
CVSSv2
CVE-2008-3231
xine-lib prior to 1.1.15 allows remote malicious users to cause a denial of service (crash) via a crafted OGG file, as demonstrated by playing lol-ffplay.ogg with xine.
Xine Xine-lib 1.1.1Xine Xine-lib 1.1.0Xine Xine-lib 1.1.13Xine Xine-lib 1.1.2Xine Xine-lib 1.1.4Xine Xine-lib 1.1.5Xine Xine-lib 1Xine Xine-lib 1.0.2Xine Xine-lib 1.0.1Xine Xine-lib 1.1.10.1Xine Xine-lib 1.1.11.1Xine Xine-lib 1.1.8Xine Xine-lib 1.1.9Xine Xine-lib 0.99Xine Xine-lib 1.0.3aXine Xine-lib 1.1.3Xine Xine-lib 1.1.12Xine Xine-lib 1.1.6Xine Xine-lib 1.1.7Xine Xine-lib 0.9.8Xine Xine-lib 0.9.13Xine Xine-lib 1.0
4.3
CVSSv2
CVE-2008-5241
Integer underflow in demux_qt.c in xine-lib 1.1.12, and other 1.1.15 and previous versions versions, allows remote malicious users to cause a denial of service (crash) via a crafted media file that results in a small value of moov_atom_size in a compressed MOV (aka CMOV_ATOM).
Xine Xine-lib 1.1.13Xine Xine-lib 1.1.9.1Xine Xine-lib 1.1.8Xine Xine-lib 1.0.3aXine Xine-lib 1.1.0Xine Xine-lib 1Xine Xine-lib 1 Beta5Xine Xine-lib 1 Beta4Xine Xine-lib 1.1.11Xine Xine-lib 1.1.10.1Xine Xine-lib 1.1.4Xine Xine-lib 1.1.3Xine Xine-lib 1.0Xine Xine-lib 1 Beta9Xine Xine-lib 1 Beta8Xine Xine-lib 1 Beta1Xine Xine-lib 0.9.13Xine Xine-lib 1.1.10Xine Xine-lib 1.1.9Xine Xine-lib 1.1.2Xine Xine-lib 1.1.1Xine Xine-lib 1 Beta7
6.8
CVSSv2
CVE-2008-5242
demux_qt.c in xine-lib 1.1.12, and other 1.1.15 and previous versions versions, does not validate the count field before calling calloc for STSD_ATOM atom allocation, which allows remote malicious users to cause a denial of service (crash) or possibly execute arbitrary code via a...
Xine Xine-lib 1.1.10.1Xine Xine-lib 1.1.10Xine Xine-lib 1.1.4Xine Xine-lib 1.1.3Xine Xine-lib 1.0Xine Xine-lib 1Xine Xine-lib 1 Beta9Xine Xine-lib 1 Beta8Xine Xine-lib 1 Beta1Xine Xine-lib 0.9.13Xine Xine-lib 1.1.14Xine Xine-lib 1.1.11.1Xine Xine-lib 1.1.11Xine Xine-lib 1.1.6Xine Xine-lib 1.1.5Xine Xine-lib 1.0.2Xine Xine-lib 1.0.1Xine Xine-lib 1 Beta11Xine Xine-lib 1 Beta10Xine Xine-lib 1 Beta3Xine Xine-lib 1 Beta2Xine Xine-lib 1.1.9
4.3
CVSSv2
CVE-2008-5243
The real_parse_headers function in demux_real.c in xine-lib 1.1.12, and other 1.1.15 and previous versions versions, relies on an untrusted input length value to "reindex into an allocated buffer," which allows remote malicious users to cause a denial of service (crash)...
Xine Xine-lib 1.1.10.1Xine Xine-lib 1.1.10Xine Xine-lib 1.1.4Xine Xine-lib 1.1.3Xine Xine-lib 1Xine Xine-lib 1 Beta9Xine Xine-lib 1 Beta8Xine Xine-lib 0.9.13Xine Xine-lib 1.1.14Xine Xine-lib 1.1.11.1Xine Xine-lib 1.1.11Xine Xine-lib 1.1.6Xine Xine-lib 1.1.5Xine Xine-lib 1.0.2Xine Xine-lib 1.0.1Xine Xine-lib 1.0Xine Xine-lib 1 Beta11Xine Xine-lib 1 Beta10Xine Xine-lib 1 Beta3Xine Xine-lib 1 Beta2Xine Xine-lib 1 Beta1Xine Xine-lib 1.1.9
10
CVSSv2
CVE-2008-5244
Unspecified vulnerability in xine-lib prior to 1.1.15 has unknown impact and attack vectors related to libfaad. NOTE: due to the lack of details, it is not clear whether this is an issue in xine-lib or in libfaad.
Xine Xine-lib 1.1.10.1Xine Xine-lib 1.1.10Xine Xine-lib 1.1.4Xine Xine-lib 1.1.3Xine Xine-lib 1Xine Xine-lib 1 Beta9Xine Xine-lib 1 Beta8Xine Xine-lib 0.9.13Xine Xine-lib 1.1.14Xine Xine-lib 1.1.11.1Xine Xine-lib 1.1.11Xine Xine-lib 1.1.6Xine Xine-lib 1.1.5Xine Xine-lib 1.0.1Xine Xine-lib 1.0Xine Xine-lib 1 Beta11Xine Xine-lib 1 Beta10Xine Xine-lib 1 Beta2Xine Xine-lib 1 Beta1Xine Xine-lib 1.1.9Xine Xine-lib 1.1.9.1Xine Xine-lib 1.1.2
4.3
CVSSv2
CVE-2008-5247
The real_parse_audio_specific_data function in demux_real.c in xine-lib 1.1.12, and other 1.1.15 and previous versions versions, uses an untrusted height (aka codec_data_length) value as a divisor, which allow remote malicious users to cause a denial of service (divide-by-zero er...
Xine Xine-lib 1.1.13Xine Xine-lib 1.1.12Xine Xine-lib 1.1.7Xine Xine-lib 1.1.6Xine Xine-lib 1.1.10.1Xine Xine-lib 1.1.10Xine Xine-lib 1.1.9Xine Xine-lib 1.1.3Xine Xine-lib 1.1.2Xine Xine-lib 1Xine Xine-lib 1 Beta8Xine Xine-lib 1 Beta7Xine Xine-lib 0.9.13Xine Xine-lib 1.1.14Xine Xine-lib 1.1.0Xine Xine-lib 1.0.2Xine Xine-lib 1 Beta12Xine Xine-lib 1 Beta11Xine Xine-lib 1 Beta4Xine Xine-lib 1 Beta3Xine Xine-lib 1.1.9.1Xine Xine-lib 1.1.8
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4040privilege escalationCVE-2024-4112CVE-2024-32872man-in-the-middleCVE-2024-32788bypassCVE-2024-3400CVE-2024-28976
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook