Published: 23/02/2009 Updated: 10/10/2018

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Integer overflow in the 4xm demuxer (demuxers/demux_4xm.c) in xine-lib 1.1.16.1 allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a 4X movie file with a large current_track value, a similar issue to CVE-2009-0385.

Vulnerable Product	Search on Vulmon	Subscribe to Product
xine xine-lib 1.1.16.1

Debian Bug report logs - #517792 CVE-2009-0698: integer overflow Package: xine-lib; Maintainer for xine-lib is (unknown); Reported by: Steffen Joeris <steffenjoeris@skolelinuxde> Date: Mon, 2 Mar 2009 02:30:02 UTC Severity: grave Tags: patch, pending, security Found in version 1114-1 Fixed in version 11163-1 Done ...

It was discovered that the QT demuxer in xine-lib did not correctly handle a large count value in an STTS atom, resulting in a heap-based buffer overflow If a user or automated system were tricked into opening a specially crafted MOV file, an attacker could execute arbitrary code as the user invoking the program (CVE-2009-1274) ...

It was discovered that the 4xm demuxer in xine-lib did not correctly handle a large current_track value in a 4xm file, resulting in an integer overflow If a user or automated system were tricked into opening a specially crafted 4xm movie file, an attacker could crash xine-lib or possibly execute arbitrary code with the privileges of the user invok ...

CWE-189 http://www.trapkit.de/advisories/TKADV2009-004.txt http://bugs.xine-project.org/show_bug.cgi?id=205 http://sourceforge.net/project/shownotes.php?release_id=660071 http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html http://www.ubuntu.com/usn/USN-746-1 http://www.mandriva.com/security/advisories?name=MDVSA-2009:299 http://www.mandriva.com/security/advisories?name=MDVSA-2009:298 https://exchange.xforce.ibmcloud.com/vulnerabilities/48954 http://www.securityfocus.com/archive/1/500514/100/0/threaded https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=517792 https://nvd.nist.gov https://usn.ubuntu.com/763-1/

CVE-2009-0698

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect