Lucene search

K
openvasCopyright (C) 2008 Greenbone Networks GmbHOPENVAS:1361412562310900111
HistoryAug 22, 2008 - 12:00 a.m.

xine-lib Multiple Vulnerabilities

2008-08-2200:00:00
Copyright (C) 2008 Greenbone Networks GmbH
plugins.openvas.org
10

7.6 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.06 Low

EPSS

Percentile

93.5%

xine-lib is prone to multiple vulnerabilities.

# Copyright (C) 2008 Greenbone Networks GmbH
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-or-later
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License
# as published by the Free Software Foundation; either version 2
# of the License, or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.900111");
  script_version("2022-05-11T11:17:52+0000");
  script_cve_id("CVE-2008-5235");
  script_tag(name:"cvss_base", value:"9.3");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:M/Au:N/C:C/I:C/A:C");
  script_tag(name:"last_modification", value:"2022-05-11 11:17:52 +0000 (Wed, 11 May 2022)");
  script_tag(name:"creation_date", value:"2008-08-22 10:29:01 +0200 (Fri, 22 Aug 2008)");
  script_category(ACT_GATHER_INFO);
  script_family("General");
  script_copyright("Copyright (C) 2008 Greenbone Networks GmbH");
  script_name("xine-lib Multiple Vulnerabilities");
  script_dependencies("gather-package-list.nasl");
  script_mandatory_keys("login/SSH/success");
  script_exclude_keys("ssh/no_linux_shell");

  script_xref(name:"URL", value:"http://www.frsirt.com/english/advisories/2008/2382");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/30698");
  script_xref(name:"URL", value:"http://sourceforge.net/project/shownotes.php?release_id=619869&group_id=9655");

  script_tag(name:"summary", value:"xine-lib is prone to multiple vulnerabilities.");

  script_tag(name:"insight", value:"The flaws are due to:

  - errors when processing malformed Ogg files in demux_ogg_send_chunk()
  and send_header() functions in src/demuxers/demux_ogg.c

  - error when processing malformed V4L video in open_video_capture_device()
  function in src/input/input_v4l.c file.

  - error when processing malformed ID3 data in id3v22_interp_frame(),
  id3v23_interp_frame(), and id3v24_interp_frame() functions in src/demuxers/id3.c file.

  - error when processing malformed Real file in demux_real_send_chunk()
  function in src/demuxers/demux_real.c file.");

  script_tag(name:"affected", value:"xine-lib versions prior to 1.1.15 on Linux (All).");

  script_tag(name:"solution", value:"Upgrade to xine-lib version 1.1.15.");

  script_tag(name:"impact", value:"Remote exploitation could allow execution of arbitrary code to
  cause the server to crash or denying the access to legitimate users.");

  script_tag(name:"qod_type", value:"executable_version_unreliable");
  script_tag(name:"solution_type", value:"VendorFix");

  exit(0);
}

include("ssh_func.inc");
include("version_func.inc");

sock = ssh_login_or_reuse_connection();
if(!sock) exit(0);

xineVer = ssh_cmd(socket:sock, cmd:"xine-config --version");
ssh_close_connection();
if(!xineVer) exit(0);

if(egrep(pattern:"^(0\..*|1\.(0\..*|1(\.0?[0-9]|\.1[0-4])?))([^.0-9]|$)", string:xineVer)){
  report = report_fixed_ver(installed_version:xineVer, fixed_version:"1.1.15");
  security_message(port:0, data:report);
  exit(0);
}

exit(99);

7.6 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.06 Low

EPSS

Percentile

93.5%