---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerability reports. http://secunia.com/secunia_security_specialist/ ---------------------------------------------------------------------- TITLE: xine-lib HTTP Response Heap Corruption Weakness SECUNIA ADVISORY ID: SA20369 VERIFY ADVISORY: http://secunia.com/advisories/20369/ CRITICAL: Not critical IMPACT: DoS WHERE: >From remote SOFTWARE: xine-lib 1.x http://secunia.com/product/3410/ DESCRIPTION: Federico L. Bossi Bonin has discovered a weakness in xine-lib, which can be exploited by malicious people to crash certain applications on a user's system. The weakness is cause due to a heap corruption within the "xineplug_inp_http.so" plugin when handling an overly large reply from the HTTP server. This can be exploited to crash an application that uses the plugin (e.g. gxine). Successful exploitation requires that the user is e.g. tricked into opening a HTTP MRL to a malicious website. The weakness has been confirmed in xine-lib 1.1.1. Other versions may also be affected. SOLUTION: Do not open MRL to untrusted web sites. PROVIDED AND/OR DISCOVERED BY: Federico L. Bossi Bonin ORIGINAL ADVISORY: http://milw0rm.com/exploits/1852 ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------