Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2008-0073
HistoryMar 24, 2008 - 10:44 p.m.

CVE-2008-0073

2008-03-2422:44:00
CWE-189
[email protected]
web.nvd.nist.gov

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.3 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.5%

JSON

Array index error in the sdpplin_parse function in input/libreal/sdpplin.c in xine-lib 1.1.10.1 allows remote RTSP servers to execute arbitrary code via a large streamid SDP parameter.

Affected configurations

NVD
Node
redhatfedoraMatch8
AND
xinexine-libMatch1.1.10.1

References

Related

cve 1
nessus 14
packetstorm 1
openvas 22
fedora 3
ubuntucve 1
prion 1
redhatcve 1
cvelist 1
securityvulns 2
seebug 2
exploitpack 1
debiancve 1
slackware 1
exploitdb 1
gentoo 2
osv 2
debian 2
ubuntu 1
cve
cve
CVE-2008-0073
2008-03-24 22:44:00
nessus
nessus
SuSE 10 Security Update : xine (ZYPP Patch Number 5116)
2008-04-01 00:00:00
openSUSE 10 Security Update : xine-devel (xine-devel-5113)
2008-03-31 00:00:00
Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / current : xine-lib (SSA:2008-089-03)
2008-03-31 00:00:00
packetstorm
packetstorm
mplayer-overflowpoc.txt
2008-03-26 00:00:00
openvas
openvas
Fedora Update for xine-lib FEDORA-2008-2569
2009-02-16 00:00:00
Fedora Update for xine-lib FEDORA-2008-2569
2009-02-16 00:00:00
Slackware Advisory SSA:2008-089-03 xine-lib
2012-09-11 00:00:00
fedora
fedora
[SECURITY] Fedora 8 Update: xine-lib-1.1.11-1.fc8
2008-03-21 22:06:16
[SECURITY] Fedora 7 Update: xine-lib-1.1.11.1-1.fc7
2008-04-09 05:18:08
[SECURITY] Fedora 8 Update: xine-lib-1.1.15-1.fc8
2008-09-10 06:45:50
ubuntucve
ubuntucve
CVE-2008-0073
2008-03-24 00:00:00
prion
prion
Design/Logic Flaw
2008-03-24 22:44:00
redhatcve
redhatcve
CVE-2008-0073
2019-10-04 21:36:03
cvelist
cvelist
CVE-2008-0073
2008-03-24 22:00:00
securityvulns
securityvulns
[Full-disclosure] CVE-2008-0073 - MPlayer and VLC "sdpplin_parse()" Array Indexing Vulnerability
2008-03-25 00:00:00
Xine / MPlayer / VLC buffer overflow
2008-03-25 00:00:00
seebug
seebug
MPlayer sdpplin_parse() Array Indexing Buffer Overflow Exploit PoC
2008-03-26 00:00:00
xine-lib sdpplin_parse()ε‡½ζ•°θΏœη¨‹ζΊ’ε‡ΊζΌζ΄ž
2008-03-21 00:00:00
exploitpack
exploitpack
MPlayer 1.0 rc2 - sdpplin_parse() Array Indexing Buffer Overflow (PoC)
2008-03-25 00:00:00
debiancve
debiancve
CVE-2008-0073
2008-03-24 22:44:00
slackware
slackware
[slackware-security] xine-lib
2008-03-30 00:05:12
exploitdb
exploitdb
MPlayer 1.0 rc2 - 'sdpplin_parse()' Array Indexing Buffer Overflow (PoC)
2008-03-25 00:00:00
gentoo
gentoo
xine-lib: User-assisted execution of arbitrary code
2008-08-06 00:00:00
VLC: User-assisted execution of arbitrary code
2008-04-23 00:00:00
osv
osv
xine-lib - several vulnerabilities
2008-03-31 00:00:00
vlc - several vulnerabilities
2008-04-09 00:00:00
debian
debian
[SECURITY] [DSA 1536-1] New libxine packages fix several vulnerabilities
2008-03-31 20:51:58
[SECURITY] [DSA 1543-1] New vlc packages fix several vulnerabilities
2008-04-09 19:26:06
ubuntu
ubuntu
xine-lib vulnerabilities
2008-08-06 00:00:00

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.3 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.5%

JSON
Related for NVD:CVE-2008-0073
cve1nessus14packetstorm1openvas22fedora3ubuntucve1prion1redhatcve1cvelist1securityvulns2seebug2exploitpack1debiancve1slackware1exploitdb1gentoo2osv2debian2ubuntu1