CVE-2008-1161

2008-03-1000:00:00

ubuntu.com

0.047 Low

EPSS

Percentile

92.6%

JSON

Buffer overflow in the Matroska demuxer (demuxers/demux_matroska.c) in
xine-lib before 1.1.10.1 allows remote attackers to cause a denial of
service (crash) and possibly execute arbitrary code via a Matroska file
with invalid frame sizes.

Bugs

Notes

Author	Note
jdstrand	note that 1.1.11.1-1ubuntu3 fixed a Matroska regression-- may need both hg.debian.org commits regression not introduced as part of the security patch

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchxine-lib< 1.1.1+ubuntu2-7.9UNKNOWN
ubuntu7.04noarchxine-lib< 1.1.4-2ubuntu3.1UNKNOWN
ubuntu7.10noarchxine-lib< 1.1.7-1ubuntu1.3UNKNOWN