Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2008-5236

Multiple heap-based buffer overflows in xine-lib 1.1.12, and other 1.1.15 and earlier versions, allow remote attackers to execute arbitrary code via vectors related to (1) a crafted EBML element length processed by the parse_block_group function in demux_matroska.c; (2) a certain combination of sps, w, and h values processed by the real_parse_audio_specific_data and demux_real_send_chunk functions in demux_real.c; and (3) an unspecified combination of three values processed by the open_ra_file function in demux_realaudio.c. NOTE: vector 2 reportedly exists because of an incomplete fix in 1.1.15.

Published

2008-11-26T01:30:00.517

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 9.3 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

8.6

Impact Score

10.0

Weaknesses

Type: Primary
CWE-119

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	xine	xine	≤ 1.1.5	Yes
Application	xine	xine	0.9.13	Yes
Application	xine	xine	1	Yes
Application	xine	xine	1	Yes
Application	xine	xine	1	Yes
Application	xine	xine	1	Yes
Application	xine	xine	1	Yes
Application	xine	xine	1	Yes
Application	xine	xine	1	Yes
Application	xine	xine	1	Yes
Application	xine	xine	1	Yes
Application	xine	xine	1	Yes
Application	xine	xine	1	Yes
Application	xine	xine	1	Yes
Application	xine	xine	1	Yes
Application	xine	xine	1	Yes
Application	xine	xine	1	Yes
Application	xine	xine	1	Yes
Application	xine	xine	1	Yes
Application	xine	xine	1	Yes
Application	xine	xine	1	Yes
Application	xine	xine	1	Yes
Application	xine	xine	1	Yes
Application	xine	xine	1	Yes
Application	xine	xine	1	Yes
Application	xine	xine	1	Yes
Application	xine	xine	1	Yes
Application	xine	xine	1.0	Yes
Application	xine	xine	1.0.1	Yes
Application	xine	xine	1.0.2	Yes
Application	xine	xine	1.0.3a	Yes
Application	xine	xine	1.1.0	Yes
Application	xine	xine	1.1.1	Yes
Application	xine	xine	1.1.2	Yes
Application	xine	xine	1.1.3	Yes
Application	xine	xine	1.1.4	Yes
Application	xine	xine	1.1.10.1	Yes
Application	xine	xine	1.1.11	Yes
Application	xine	xine	1.1.11.1	Yes

References

http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html ([email protected])
http://secunia.com/advisories/31502 ([email protected])
http://secunia.com/advisories/31567 Vendor Advisory ([email protected])
http://secunia.com/advisories/31827 ([email protected])
http://secunia.com/advisories/33544 ([email protected])
http://securityreason.com/securityalert/4648 ([email protected])
http://sourceforge.net/project/shownotes.php?release_id=619869 ([email protected])
http://www.mandriva.com/security/advisories?name=MDVSA-2009:020 ([email protected])
http://www.ocert.org/analysis/2008-008/analysis.txt ([email protected])
http://www.osvdb.org/47744 ([email protected])
http://www.securityfocus.com/archive/1/495674/100/0/threaded ([email protected])
http://www.securityfocus.com/bid/30797 ([email protected])
http://www.vupen.com/english/advisories/2008/2382 ([email protected])
http://www.vupen.com/english/advisories/2008/2427 ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/44634 ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/44642 ([email protected])
https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00174.html ([email protected])
https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00385.html ([email protected])
https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00555.html ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/31502 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/31567 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/31827 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/33544 (af854a3a-2127-422b-91ae-364da2661108)
http://securityreason.com/securityalert/4648 (af854a3a-2127-422b-91ae-364da2661108)
http://sourceforge.net/project/shownotes.php?release_id=619869 (af854a3a-2127-422b-91ae-364da2661108)
http://www.mandriva.com/security/advisories?name=MDVSA-2009:020 (af854a3a-2127-422b-91ae-364da2661108)
http://www.ocert.org/analysis/2008-008/analysis.txt (af854a3a-2127-422b-91ae-364da2661108)
http://www.osvdb.org/47744 (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/495674/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/30797 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2008/2382 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2008/2427 (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/44634 (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/44642 (af854a3a-2127-422b-91ae-364da2661108)
https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00174.html (af854a3a-2127-422b-91ae-364da2661108)
https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00385.html (af854a3a-2127-422b-91ae-364da2661108)
https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00555.html (af854a3a-2127-422b-91ae-364da2661108)