Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2009-0698
HistoryFeb 23, 2009 - 3:30 p.m.

CVE-2009-0698

2009-02-2315:30:00
CWE-189
[email protected]
web.nvd.nist.gov
24
cve-2009-0698
integer overflow
4xm demuxer
xine-lib 1.1.16.1
remote code execution
denial of service
nvd

6.8 Medium

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.067 Low

EPSS

Percentile

93.8%

JSON

Integer overflow in the 4xm demuxer (demuxers/demux_4xm.c) in xine-lib 1.1.16.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a 4X movie file with a large current_track value, a similar issue to CVE-2009-0385.

CPENameOperatorVersion
xine:xine-libxine xine-libeq1.1.16.1

Related

prion 2
debiancve 2
openvas 40
nessus 21
ubuntucve 3
ubuntu 3
freebsd 3
slackware 1
seebug 1
checkpoint_advisories 1
cve 1
debian 2
fedora 2
osv 2
gentoo 2
ibm 1
prion
prion
Integer overflow
2009-02-23 15:30:00
Integer overflow
2009-02-02 19:30:00
debiancve
debiancve
CVE-2009-0698
2009-02-23 15:30:00
CVE-2009-0385
2009-02-02 19:30:00
openvas
openvas
Mandriva Security Advisory MDVSA-2009:299 (xine-lib)
2009-11-17 00:00:00
Mandriva Security Advisory MDVSA-2009:299 (xine-lib)
2009-11-17 00:00:00
FreeBSD Ports: libxine
2009-05-20 00:00:00
nessus
nessus
Mandriva Linux Security Advisory : xine-lib (MDVSA-2009:299)
2009-11-16 00:00:00
openSUSE Security Update : libxine-devel (libxine-devel-582)
2009-07-21 00:00:00
SuSE 11 Security Update : Xine (SAT Patch Number 643)
2009-09-24 00:00:00
ubuntucve
ubuntucve
CVE-2009-0698
2009-02-23 00:00:00
CVE-2009-1274
2009-04-08 00:00:00
CVE-2009-0385
2009-02-02 00:00:00
ubuntu
ubuntu
xine-lib vulnerabilities
2009-04-20 00:00:00
xine-lib vulnerability
2009-03-26 00:00:00
FFmpeg vulnerabilities
2009-03-16 00:00:00
freebsd
freebsd
libxine -- multiple vulnerabilities
2009-02-15 00:00:00
ffmpeg -- 4xm processing memory corruption vulnerability
2009-01-28 00:00:00
libxine -- multiple vulnerabilities
2009-04-04 00:00:00
slackware
slackware
xine-lib
2009-04-07 23:31:21
seebug
seebug
FFmpeg 4xm文件解析内存破坏漏洞
2009-02-19 00:00:00
checkpoint_advisories
checkpoint_advisories
FFmpeg 4xm Processing Memory Corruption (CVE-2009-0385)
2009-11-03 00:00:00
cve
cve
CVE-2009-0385
2009-02-02 19:30:00
debian
debian
[SECURITY] [DSA 1781-1] New ffmpeg-debian packages fix arbitrary code execution
2009-04-29 07:00:35
[SECURITY] [DSA 1782-1] New mplayer packages fix arbitrary code execution
2009-04-29 07:01:08
fedora
fedora
[SECURITY] Fedora 10 Update: xine-lib-1.1.16.3-1.fc10
2009-04-09 16:08:28
[SECURITY] Fedora 9 Update: xine-lib-1.1.16.3-1.fc9
2009-04-09 16:07:39
osv
osv
ffmpeg ffmpeg-debian - arbitrary code execution
2009-04-29 00:00:00
mplayer - arbitrary code execution
2009-04-29 00:00:00
gentoo
gentoo
FFmpeg: Multiple vulnerabilities
2009-03-19 00:00:00
xine-lib: User-assisted execution of arbitrary code
2010-06-01 00:00:00
ibm
ibm
Security Bulletin: Multiple Vulnerabilities Have Been Identified In IBM Security Verify Privilege Vault previously known as IBM Security Secret Server
2020-09-23 05:03:22

6.8 Medium

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.067 Low

EPSS

Percentile

93.8%

JSON
Related for CVE-2009-0698
prion2debiancve2openvas40nessus21ubuntucve3ubuntu3freebsd3slackware1seebug1checkpoint_advisories1cve1debian2fedora2osv2gentoo2ibm1