CVE-2008-5236

Multiple heap-based buffer overflows in xine-lib 1.1.12, and other 1.1.15 and earlier versions, allow remote attackers to execute arbitrary code via vectors related to 1 a crafted EBML element length processed by the parseblockgroup function in demuxmatroska.c; 2 a certain combination of sps, w,...

CVE-2008-5236

CVE-2008-5236 affects xine-lib 1.1.12 and earlier 1.1.15, with multiple heap-based buffer overflows allowing remote code execution. Affected vectors include: (1) crafted EBML element length processed by parse_block_group in demux_matroska.c; (2) a combination of sps, w, and h values in demux_real...