what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Mandriva Linux Security Advisory 2008-020

Posted Jan 23, 2008

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory - Heap-based buffer overflow in the rmff_dump_cont function in input/libreal/rmff.c in xine-lib 1.1.9 and earlier allows remote attackers to execute arbitrary code via the SDP Abstract attribute, related to the rmff_dump_header function and related to disregarding the max field. Multiple heap-based buffer overflows in the rmff_dump_cont function in input/libreal/rmff.c in xine-lib 1.1.9 allow remote attackers to execute arbitrary code via the SDP (1) Title, (2) Author, or (3) Copyright attribute, related to the rmff_dump_header function, different vectors than CVE-2008-0225.

tags | advisory, remote, overflow, arbitrary

systems | linux, mandriva

advisories | CVE-2008-0238, CVE-2008-0225

SHA-256 | 2df0ed3c500330133a8e4a0ab61ec8de41ad5a746274fc8172fef51a13274af3

Download | Favorite | View

Related Files

No related files