4.3

CVE-2008-5243

The real_parse_headers function in demux_real.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, relies on an untrusted input length value to "reindex into an allocated buffer," which allows remote attackers to cause a denial of service (crash) via a crafted value, probably an array index error.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Xine ≫ Xine-lib Version <= 1.1.15
Xine ≫ Xine-lib Version0.9.13
Xine ≫ Xine-lib Version1 Updaterc0a
Xine ≫ Xine-lib Version1 Updaterc1
Xine ≫ Xine-lib Version1 Updaterc2
Xine ≫ Xine-lib Version1 Updaterc3
Xine ≫ Xine-lib Version1 Updaterc3a
Xine ≫ Xine-lib Version1 Updaterc3b
Xine ≫ Xine-lib Version1 Updaterc3c
Xine ≫ Xine-lib Version1 Updaterc4
Xine ≫ Xine-lib Version1 Updaterc4a
Xine ≫ Xine-lib Version1 Updaterc5
Xine ≫ Xine-lib Version1 Updaterc6a
Xine ≫ Xine-lib Version1 Updaterc7
Xine ≫ Xine-lib Version1 Updaterc8
Xine ≫ Xine-lib Version1.0
Xine ≫ Xine-lib Version1.0.1
Xine ≫ Xine-lib Version1.0.2
Xine ≫ Xine-lib Version1.0.3a
Xine ≫ Xine-lib Version1.1.0
Xine ≫ Xine-lib Version1.1.1
Xine ≫ Xine-lib Version1.1.2
Xine ≫ Xine-lib Version1.1.3
Xine ≫ Xine-lib Version1.1.4
Xine ≫ Xine-lib Version1.1.5
Xine ≫ Xine-lib Version1.1.6
Xine ≫ Xine-lib Version1.1.7
Xine ≫ Xine-lib Version1.1.8
Xine ≫ Xine-lib Version1.1.9
Xine ≫ Xine-lib Version1.1.9.1
Xine ≫ Xine-lib Version1.1.10
Xine ≫ Xine-lib Version1.1.10.1
Xine ≫ Xine-lib Version1.1.11
Xine ≫ Xine-lib Version1.1.11.1
Xine ≫ Xine-lib Version1.1.12
Xine ≫ Xine-lib Version1.1.13
Xine ≫ Xine-lib Version1.1.14
Xine ≫ Xine-lib Version1_beta1
Xine ≫ Xine-lib Version1_beta2
Xine ≫ Xine-lib Version1_beta3
Xine ≫ Xine-lib Version1_beta4
Xine ≫ Xine-lib Version1_beta5
Xine ≫ Xine-lib Version1_beta6
Xine ≫ Xine-lib Version1_beta7
Xine ≫ Xine-lib Version1_beta8
Xine ≫ Xine-lib Version1_beta9
Xine ≫ Xine-lib Version1_beta10
Xine ≫ Xine-lib Version1_beta11
Xine ≫ Xine-lib Version1_beta12
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.8% 0.756
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html
http://secunia.com/advisories/31827
http://www.mandriva.com/security/advisories?name=MDVSA-2009:020
https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00174.html
https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00385.html
http://securityreason.com/securityalert/4648
http://www.ocert.org/analysis/2008-008/analysis.txt
http://www.securityfocus.com/archive/1/495674/100/0/threaded
http://www.securityfocus.com/bid/30797
http://secunia.com/advisories/33544
https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00555.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/44658