CVE-2008-0225

Related Files

Ubuntu Security Notice 635-1

Posted Aug 6, 2008

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 635-1 - Many xine-lib arbitrary code execution vulnerabilities have been addressed in Ubuntu.

tags | advisory, arbitrary, vulnerability, code execution

systems | linux, ubuntu

advisories | CVE-2008-0073, CVE-2008-0225, CVE-2008-0238, CVE-2008-0486, CVE-2008-1110, CVE-2008-1161, CVE-2008-1482, CVE-2008-1686, CVE-2008-1878

SHA-256 | 99d390c6edf6c39134bcdba1921abab340fd7b8da4de5350fcc4a3b2f854f9bf

Download | Favorite | View

Mandriva Linux Security Advisory 2008-045

Posted Feb 15, 2008

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory - Multiple heap-based buffer overflow vulnerabilities along with various array index flaws allow for arbitrary code execution in mplayer.

tags | advisory, overflow, arbitrary, vulnerability, code execution

systems | linux, mandriva

advisories | CVE-2008-0225, CVE-2008-0238, CVE-2008-0485, CVE-2008-0486, CVE-2008-0629, CVE-2008-0630

SHA-256 | f1bcf0cf473fccd78e6b2308c1d9435a3aa262e40d0aead2dc19974921211ce7

Download | Favorite | View

Gentoo Linux Security Advisory 200801-12

Posted Jan 28, 2008

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory GLSA 200801-12 - Luigi Auriemma reported that xine-lib does not properly check boundaries when processing SDP attributes of RTSP streams, leading to heap-based buffer overflows. Versions less than 1.1.9.1 are affected.

tags | advisory, overflow

systems | linux, gentoo

advisories | CVE-2008-0225, CVE-2008-0238

SHA-256 | ff977b76bbb0bdb47718d75eee18d9ff51d49e812da39a5fb8750ae7181746f2

Download | Favorite | View

Mandriva Linux Security Advisory 2008-020

Posted Jan 23, 2008

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory - Heap-based buffer overflow in the rmff_dump_cont function in input/libreal/rmff.c in xine-lib 1.1.9 and earlier allows remote attackers to execute arbitrary code via the SDP Abstract attribute, related to the rmff_dump_header function and related to disregarding the max field. Multiple heap-based buffer overflows in the rmff_dump_cont function in input/libreal/rmff.c in xine-lib 1.1.9 allow remote attackers to execute arbitrary code via the SDP (1) Title, (2) Author, or (3) Copyright attribute, related to the rmff_dump_header function, different vectors than CVE-2008-0225.

tags | advisory, remote, overflow, arbitrary

systems | linux, mandriva

advisories | CVE-2008-0238, CVE-2008-0225

SHA-256 | 2df0ed3c500330133a8e4a0ab61ec8de41ad5a746274fc8172fef51a13274af3

Download | Favorite | View

Debian Linux Security Advisory 1472-1

Posted Jan 22, 2008

Authored by Debian | Site debian.org

Debian Security Advisory 1472-1 - Luigi Auriemma discovered that the Xine media player library performed insufficient input sanitising during the handling of RTSP streams, which could lead to the execution of arbitrary code.

tags | advisory, arbitrary

systems | linux, debian

advisories | CVE-2008-0225

SHA-256 | 7d69ef693573f2c21a0b5e5d44d1a8fa756dacb2e9032aca9ed12b87805533c1

Download | Favorite | View