CVE-2008-5246

2008-11-2600:00:00

ubuntu.com

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.107 Low

EPSS

Percentile

95.0%

JSON

Multiple heap-based buffer overflows in xine-lib before 1.1.15 allow remote
attackers to execute arbitrary code via vectors that send ID3 data to the
(1) id3v22_interp_frame and (2) id3v24_interp_frame functions in
src/demuxers/id3.c. NOTE: the provenance of this information is unknown;
the details are obtained solely from third party information.

Notes

Author	Note
mdeslaur	this appears to be the same bug as the (2) part of CVE-2008-5234

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchxine-lib< 1.1.1+ubuntu2-7.10UNKNOWN
ubuntu7.10noarchxine-lib< 1.1.7-1ubuntu1.4UNKNOWN
ubuntu8.04noarchxine-lib< 1.1.11.1-1ubuntu3.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	xine-lib	< 1.1.1+ubuntu2-7.10	UNKNOWN
ubuntu	7.10	noarch	xine-lib	< 1.1.7-1ubuntu1.4	UNKNOWN
ubuntu	8.04	noarch	xine-lib	< 1.1.11.1-1ubuntu3.2	UNKNOWN