4.3

CVE-2008-3231

Exploit
xine-lib before 1.1.15 allows remote attackers to cause a denial of service (crash) via a crafted OGG file, as demonstrated by playing lol-ffplay.ogg with xine.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Xine ≫ Xine-lib Version <= 1.1.14
Xine ≫ Xine-lib Version 0.9.8
Xine ≫ Xine-lib Version 0.9.13
Xine ≫ Xine-lib Version 0.99
Xine ≫ Xine-lib Version 1 Update rc0a
Xine ≫ Xine-lib Version 1 Update rc1
Xine ≫ Xine-lib Version 1 Update rc2
Xine ≫ Xine-lib Version 1 Update rc3
Xine ≫ Xine-lib Version 1 Update rc3a
Xine ≫ Xine-lib Version 1 Update rc3b
Xine ≫ Xine-lib Version 1 Update rc3c
Xine ≫ Xine-lib Version 1 Update rc4
Xine ≫ Xine-lib Version 1 Update rc4a
Xine ≫ Xine-lib Version 1 Update rc5
Xine ≫ Xine-lib Version 1 Update rc6a
Xine ≫ Xine-lib Version 1 Update rc7
Xine ≫ Xine-lib Version 1 Update rc8
Xine ≫ Xine-lib Version 1.0
Xine ≫ Xine-lib Version 1.0.1
Xine ≫ Xine-lib Version 1.0.2
Xine ≫ Xine-lib Version 1.0.3a
Xine ≫ Xine-lib Version 1.1.0
Xine ≫ Xine-lib Version 1.1.1
Xine ≫ Xine-lib Version 1.1.2
Xine ≫ Xine-lib Version 1.1.3
Xine ≫ Xine-lib Version 1.1.4
Xine ≫ Xine-lib Version 1.1.5
Xine ≫ Xine-lib Version 1.1.6
Xine ≫ Xine-lib Version 1.1.7
Xine ≫ Xine-lib Version 1.1.8
Xine ≫ Xine-lib Version 1.1.9
Xine ≫ Xine-lib Version 1.1.9.1
Xine ≫ Xine-lib Version 1.1.10
Xine ≫ Xine-lib Version 1.1.10.1
Xine ≫ Xine-lib Version 1.1.11
Xine ≫ Xine-lib Version 1.1.11.1
Xine ≫ Xine-lib Version 1.1.12
Xine ≫ Xine-lib Version 1.1.13
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.92% 0.773
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html
http://www.openwall.com/lists/oss-security/2008/07/13/3
http://secunia.com/advisories/31827
Vendor Advisory
http://sourceforge.net/project/shownotes.php?release_id=619869
http://www.mandriva.com/security/advisories?name=MDVSA-2009:020
http://www.securityfocus.com/bid/30699
Patch
Exploit
http://www.securitytracker.com/id?1020703
http://www.vupen.com/english/advisories/2008/2382
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/44040
https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00174.html
https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00385.html