Ubuntu
xine-lib package

[xine-lib] [CVE-2008-1161] DoS vulnerability and possible arbitrary code execution

Bug #203474 reported by disabled.user
254
Affects Status Importance Assigned to Milestone
xine-lib (Ubuntu)
New
Undecided
Unassigned

Bug Description

Binary package hint: libxine1

References:
SUSE-SR:2008:006

Quoting CVE-2008-1161:
"Buffer overflow in the Matroska demuxer (demuxers/demux_matroska.c) in xine-lib before 1.1.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code or via a Matroska file with invalid frame sizes."

CVE References

Revision history for this message
disabled.user (disabled.user-deactivatedaccount) wrote :

See also Bug#210163.

To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.