CVE-2008-5238

Integer overflow in the realparsemdpr function in demuxreal.c in xine-lib 1.1.12, and other versions before 1.1.15, allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted streamnamesize field...

Integer overflow

Integer overflow in the realparsemdpr function in demuxreal.c in xine-lib 1.1.12, and other versions before 1.1.15, allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted streamnamesize field...

CVE-2008-5238

CVE-2008-5238 has concrete technical details: xine-lib’s demux_real.c real_parse_mdpr function contains an integer overflow in versions up to 1.1.14 (affecting 1.1.12 and other pre-1.1.15 builds) that can be triggered by a crafted stream_name_size field. The impact is a remote denial of service (...