Ubuntu.comUB:CVE-2008-1110CVE-2008-1110
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.098 Low
EPSS
Percentile
94.9%
Buffer overflow in demuxers/demux_asf.c (aka the ASF demuxer) in the
xineplug_dmx_asf.so plugin in xine-lib before 1.1.10 allows remote
attackers to execute arbitrary code or cause a denial of service (crash)
via a crafted ASF header. NOTE: this issue leads to a crash when an attack
uses the CVE-2006-1664 exploit code, but it is different from
CVE-2006-1664.
Notes
| Author | Note |
|---|---|
| jdstrand | according to http://xinehq.de/index.php/security, 1.1.2 and earlier are not affected PoC http://milw0rm.com/exploits/1641 |
Related
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.098 Low
EPSS
Percentile
94.9%