8114 matches found
CVE-2008-5247
The realparseaudiospecificdata function in demuxreal.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, uses an untrusted height aka codecdatalength value as a divisor, which allow remote attackers to cause a denial of service divide-by-zero error and crash via a zero value...
CVE-2008-5239
CVE-2008-5239 affects xine-lib up to version 1.1.12 (and 1.1.15 and earlier). The issue occurs in unspecified read calls in input_file.c, input_net.c, input_smb.c, and input_http.c when handling negative and zero values, enabling a remote attacker to trigger out-of-bounds reads and heap-based ove...
CVE-2008-5242
The CVE-2008-5242 issue affects xine-lib up to 1.1.12/1.1.15, where demux_qt.c does not validate the count before calloc for STSD_ATOM, allowing a crafted media file to cause a denial of service and possibly execute arbitrary code. Publicly documented impacts include remote code execution in the ...
CVE-2008-5233
CVE-2008-5233 affects xine-lib 1.1.12 and earlier; the vulnerability stems from missing malloc failure checks in demux_mng.c (mymng_process_header), demux_mod.c (open_mod_file), and demux_real.c (frame_buffer) which can allow a remote attacker to crash the player or possibly execute arbitrary cod...
CVE-2008-5236
CVE-2008-5236 affects xine-lib 1.1.12 and earlier 1.1.15, with multiple heap-based buffer overflows allowing remote code execution. Affected vectors include: (1) crafted EBML element length processed by parse_block_group in demux_matroska.c; (2) a combination of sps, w, and h values in demux_real...
CVE-2008-5245
CVE-2008-5245 affects xine-lib prior to 1.1.15. The issue is described as a potential buffer overflow related to V4L video frame preallocation in open_video_capture_device (src/input/input_v4l.c), with unknown impact in the initial CVE description. Related advisories (Gentoo GLSA 201006-04, SUSE ...
CVE-2008-5238
CVE-2008-5238 has concrete technical details: xine-lib’s demux_real.c real_parse_mdpr function contains an integer overflow in versions up to 1.1.14 (affecting 1.1.12 and other pre-1.1.15 builds) that can be triggered by a crafted stream_name_size field. The impact is a remote denial of service (...
CVE-2008-5248
CVE-2008-5248 affects xine-lib prior to 1.1.15. A remote attacker can cause a crash (DoS) by playing MP3s with metadata consisting only of separators. Several advisories note this family of issues; some sources warn of potential remote code execution via related bugs. Remediation: upgrade to xine...
CVE-2008-5241
Integer underflow in demuxqt.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, allows remote attackers to cause a denial of service crash via a crafted media file that results in a small value of moovatomsize in a compressed MOV aka CMOVATOM...
CVE-2008-5235
CVE-2008-5235 is a heap-based buffer overflow in the Real demux path of xine-lib (= 1.1.16.3, though the exact fixed version is not reiterated in all connected documents. No exploitation details or in-the-wild indicators are provided in the supplied materials.
CVE-2008-5246
CVE-2008-5246 affects xine-lib prior to 1.1.15, with multiple heap-based buffer overflows in ID3 parsing (id3v22_interp_frame/id3v24_interp_frame) that could enable remote code execution. The connected advisories corroborate related overflow issues across variants and note remediation by upgradin...
CVE-2008-5237
CVE-2008-5237 affects xine-lib 1.1.12 and earlier 1.1.15 and older. Two overflow paths: (1) mymng_process_header uses crafted width/height values in demux_mng.c, leading to a crash or potential code execution, and (2) parse_reference_atom uses crafted current_atom_size and string_size in demux_qt...
CVE-2008-5244
Unspecified vulnerability in xine-lib before 1.1.15 has unknown impact and attack vectors related to libfaad. NOTE: due to the lack of details, it is not clear whether this is an issue in xine-lib or in libfaad...
CVE-2008-5246
Multiple heap-based buffer overflows in xine-lib before 1.1.15 allow remote attackers to execute arbitrary code via vectors that send ID3 data to the 1 id3v22interpframe and 2 id3v24interpframe functions in src/demuxers/id3.c. NOTE: the provenance of this information is unknown; the details are...
CVE-2008-5234
Multiple heap-based buffer overflows in xine-lib 1.1.12, and other versions before 1.1.15, allow remote attackers to execute arbitrary code via vectors related to 1 a crafted metadata atom size processed by the parsemoovatom function in demuxqt.c and 2 frame reading in the id3v23interpframe...
CVE-2008-5240
CVE-2008-5240 affects xine-lib 1.1.12 (and earlier 1.1.15) where untrusted input values influence memory allocation in demux_matroska.c (MATROSKA_ID_TR_CODECPRIVATE) and in demux_real.c (PROP_TAG, MDPR_TAG, CONT_TAG). This can lead to a NULL pointer dereference, crash, or possible arbitrary code ...
CVE-2008-5233
xine-lib 1.1.12, and other versions before 1.1.15, does not check for failure of malloc in circumstances including 1 the mymngprocessheader function in demuxmng.c, 2 the openmodfile function in demuxmod.c, and 3 framebuffer allocation in the realparseaudiospecificdata function in demuxreal.c, whi...
CVE-2008-5244
Unspecified vulnerability in xine-lib before 1.1.15 has unknown impact and attack vectors related to libfaad. NOTE: due to the lack of details, it is not clear whether this is an issue in xine-lib or in libfaad...
CVE-2008-5246
Multiple heap-based buffer overflows in xine-lib before 1.1.15 allow remote attackers to execute arbitrary code via vectors that send ID3 data to the 1 id3v22interpframe and 2 id3v24interpframe functions in src/demuxers/id3.c. NOTE: the provenance of this information is unknown; the details are...