4.3

CVE-2008-5248

xine-lib before 1.1.15 allows remote attackers to cause a denial of service (crash) via "MP3 files with metadata consisting only of separators."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Xine ≫ Xine-lib Version <= 1.1.15
Xine ≫ Xine-lib Version 0.9.13
Xine ≫ Xine-lib Version 1 Update rc0a
Xine ≫ Xine-lib Version 1 Update rc1
Xine ≫ Xine-lib Version 1 Update rc2
Xine ≫ Xine-lib Version 1 Update rc3
Xine ≫ Xine-lib Version 1 Update rc3a
Xine ≫ Xine-lib Version 1 Update rc3b
Xine ≫ Xine-lib Version 1 Update rc3c
Xine ≫ Xine-lib Version 1 Update rc4
Xine ≫ Xine-lib Version 1 Update rc4a
Xine ≫ Xine-lib Version 1 Update rc5
Xine ≫ Xine-lib Version 1 Update rc6a
Xine ≫ Xine-lib Version 1 Update rc7
Xine ≫ Xine-lib Version 1 Update rc8
Xine ≫ Xine-lib Version 1.0
Xine ≫ Xine-lib Version 1.0.1
Xine ≫ Xine-lib Version 1.0.2
Xine ≫ Xine-lib Version 1.0.3a
Xine ≫ Xine-lib Version 1.1.0
Xine ≫ Xine-lib Version 1.1.1
Xine ≫ Xine-lib Version 1.1.2
Xine ≫ Xine-lib Version 1.1.3
Xine ≫ Xine-lib Version 1.1.4
Xine ≫ Xine-lib Version 1.1.5
Xine ≫ Xine-lib Version 1.1.6
Xine ≫ Xine-lib Version 1.1.7
Xine ≫ Xine-lib Version 1.1.8
Xine ≫ Xine-lib Version 1.1.9
Xine ≫ Xine-lib Version 1.1.9.1
Xine ≫ Xine-lib Version 1.1.10
Xine ≫ Xine-lib Version 1.1.10.1
Xine ≫ Xine-lib Version 1.1.11
Xine ≫ Xine-lib Version 1.1.11.1
Xine ≫ Xine-lib Version 1.1.12
Xine ≫ Xine-lib Version 1.1.13
Xine ≫ Xine-lib Version 1.1.14
Xine ≫ Xine-lib Version 1_beta1
Xine ≫ Xine-lib Version 1_beta2
Xine ≫ Xine-lib Version 1_beta3
Xine ≫ Xine-lib Version 1_beta4
Xine ≫ Xine-lib Version 1_beta5
Xine ≫ Xine-lib Version 1_beta6
Xine ≫ Xine-lib Version 1_beta7
Xine ≫ Xine-lib Version 1_beta8
Xine ≫ Xine-lib Version 1_beta9
Xine ≫ Xine-lib Version 1_beta10
Xine ≫ Xine-lib Version 1_beta11
Xine ≫ Xine-lib Version 1_beta12
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.21% 0.644
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html
http://sourceforge.net/project/shownotes.php?release_id=619869
http://www.mandriva.com/security/advisories?name=MDVSA-2009:298
http://www.securityfocus.com/bid/32505