Lucene search
HistoryNov 26, 2008 - 1:30 a.m.
CVE-2008-5235
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7.7 High
AI Score
Confidence
Low
0.06 Low
EPSS
Percentile
93.5%
Heap-based buffer overflow in the demux_real_send_chunk function in src/demuxers/demux_real.c in xine-lib before 1.1.15 allows remote attackers to execute arbitrary code via a crafted Real Media file. NOTE: some of these details are obtained from third party information.
Affected configurations
Node
xinexineRange≤1.1.4
ORxinexineMatch0.9.13
ORxinexineMatch1beta1
ORxinexineMatch1beta10
ORxinexineMatch1beta11
ORxinexineMatch1beta12
ORxinexineMatch1beta2
ORxinexineMatch1beta3
ORxinexineMatch1beta4
ORxinexineMatch1beta5
ORxinexineMatch1beta6
ORxinexineMatch1beta7
ORxinexineMatch1beta8
ORxinexineMatch1beta9
ORxinexineMatch1rc0a
ORxinexineMatch1rc1
ORxinexineMatch1rc2
ORxinexineMatch1rc3
ORxinexineMatch1rc3a
ORxinexineMatch1rc3b
ORxinexineMatch1rc3c
ORxinexineMatch1rc4
ORxinexineMatch1rc4a
ORxinexineMatch1rc5
ORxinexineMatch1rc6a
ORxinexineMatch1rc7
ORxinexineMatch1rc8
ORxinexineMatch1.0
ORxinexineMatch1.0.1
ORxinexineMatch1.0.2
ORxinexineMatch1.0.3a
ORxinexineMatch1.1.0
ORxinexineMatch1.1.1
ORxinexineMatch1.1.2
ORxinexineMatch1.1.3
ORxinexineMatch1.1.10.1
ORxinexineMatch1.1.11
ORxinexineMatch1.1.11.1
Related
openvas
openvas
xine-lib Multiple Vulnerabilities
2008-08-22 00:00:00
xine-lib Multiple Vulnerabilities
2008-08-22 00:00:00
Gentoo Security Advisory GLSA 201006-04 (xine-lib)
2011-03-09 00:00:00
ubuntucve
ubuntucve
CVE-2008-5235
2008-11-26 00:00:00
debiancve
debiancve
CVE-2008-5235
2008-11-26 01:30:00
cve
cve
CVE-2008-5235
2008-11-26 01:30:00
prion
prion
Heap overflow
2008-11-26 01:30:00
cvelist
cvelist
CVE-2008-5235
2008-11-26 01:00:00
nessus
nessus
SuSE 10 Security Update : xine (ZYPP Patch Number 5965)
2011-01-27 00:00:00
openSUSE 10 Security Update : xine-devel (xine-devel-5966)
2009-02-05 00:00:00
openSUSE Security Update : xine-devel (xine-devel-483)
2009-07-21 00:00:00
gentoo
gentoo
xine-lib: User-assisted execution of arbitrary code
2010-06-01 00:00:00
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7.7 High
AI Score
Confidence
Low
0.06 Low
EPSS
Percentile
93.5%
Related for NVD:CVE-2008-5235