10
CVSSv2

CVE-2008-5244

Published: 26/11/2008 Updated: 20/02/2009
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
VMScore: 890
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

Unspecified vulnerability in xine-lib prior to 1.1.15 has unknown impact and attack vectors related to libfaad. NOTE: due to the lack of details, it is not clear whether this is an issue in xine-lib or in libfaad.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

xine xine-lib 1.1.10.1

xine xine-lib 1.1.10

xine xine-lib 1.1.4

xine xine-lib 1.1.3

xine xine-lib 1

xine xine-lib 1_beta9

xine xine-lib 1_beta8

xine xine-lib 0.9.13

xine xine-lib 1.1.14

xine xine-lib 1.1.11.1

xine xine-lib 1.1.11

xine xine-lib 1.1.6

xine xine-lib 1.1.5

xine xine-lib 1.0.1

xine xine-lib 1.0

xine xine-lib 1_beta11

xine xine-lib 1_beta10

xine xine-lib 1_beta2

xine xine-lib 1_beta1

xine xine-lib 1.1.9

xine xine-lib 1.1.9.1

xine xine-lib 1.1.2

xine xine-lib 1.1.1

xine xine-lib 1_beta7

xine xine-lib 1_beta6

xine xine-lib 1_beta5

xine xine-lib

xine xine-lib 1.1.13

xine xine-lib 1.1.12

xine xine-lib 1.1.8

xine xine-lib 1.1.7

xine xine-lib 1.0.3a

xine xine-lib 1.1.0

xine xine-lib 1.0.2

xine xine-lib 1_beta12

xine xine-lib 1_beta4

xine xine-lib 1_beta3

Vendor Advisories

Debian Bug report logs - #498243 xine-lib: multiple heap overflows Package: xine-lib; Maintainer for xine-lib is (unknown); Reported by: Steffen Joeris <steffenjoeris@skolelinuxde> Date: Mon, 8 Sep 2008 12:27:02 UTC Severity: grave Tags: help, security, upstream Done: Nico Golde <nion@debianorg> Bug is archive ...
It was discovered that xine-lib did not correctly handle certain malformed Ogg and Windows Media files If a user or automated system were tricked into opening a specially crafted Ogg or Windows Media file, an attacker could cause xine-lib to crash, creating a denial of service This issue only applied to Ubuntu 606 LTS, 710, and 804 LTS (CVE-2 ...