Mandriva Security Advisory MDVSA-2009:298 (xine-lib)

The remote host is missing an update to xine-lib announced via advisory MDVSA-2009:298. OpenVAS Vulnerability Test $Id: mdksa2009298.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:298 xine-lib Authors: Thomas Reinke Copyright: Copyright c 2009 E-Sof...

openSUSE Security Update : xine-devel (xine-devel-483)

This update of xine fixes multiple buffer overflows while parsing files : - CVE-2008-3231 - CVE-2008-5233 - CVE-2008-5234 - CVE-2008-5235 - CVE-2008-5236 - CVE-2008-5237 - CVE-2008-5238 - CVE-2008-5239 - CVE-2008-5240 - CVE-2008-5241 - CVE-2008-5242 - CVE-2008-5243 - CVE-2008-5244 - CVE-2008-5245...

openSUSE 10 Security Update : xine-devel (xine-devel-5966)

This update of xine fixes multiple buffer overflows while parsing files : - CVE-2008-3231 - CVE-2008-5233 - CVE-2008-5234 - CVE-2008-5235 - CVE-2008-5236 - CVE-2008-5237 - CVE-2008-5238 - CVE-2008-5239 - CVE-2008-5240 - CVE-2008-5241 - CVE-2008-5242 - CVE-2008-5243 - CVE-2008-5244 - CVE-2008-5245...

CVE-2008-5248

CVE-2008-5248 affects xine-lib prior to 1.1.15. A remote attacker can cause a crash (DoS) by playing MP3s with metadata consisting only of separators. Several advisories note this family of issues; some sources warn of potential remote code execution via related bugs. Remediation: upgrade to xine...