Lucene search

MitreCVE-2008-3231

HistoryJul 18, 2008 - 4:41 p.m.

CVE-2008-3231

2008-07-1816:41:00

CWE-20

mitre

web.nvd.nist.gov

xine-lib

denial of service

vulnerability

ogg file

cve-2008-3231

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

7.1

Confidence

High

EPSS

0.066

Percentile

93.9%

JSON

xine-lib before 1.1.15 allows remote attackers to cause a denial of service (crash) via a crafted OGG file, as demonstrated by playing lol-ffplay.ogg with xine.

Affected configurations

Nvd

Node

xinexine-libRange≤1.1.14

xinexine-libMatch0.9.8

xinexine-libMatch0.9.13

xinexine-libMatch0.99

xinexine-libMatch1rc0a

xinexine-libMatch1rc1

xinexine-libMatch1rc2

xinexine-libMatch1rc3

xinexine-libMatch1rc3a

xinexine-libMatch1rc3b

xinexine-libMatch1rc3c

xinexine-libMatch1rc4

xinexine-libMatch1rc4a

xinexine-libMatch1rc5

xinexine-libMatch1rc6a

xinexine-libMatch1rc7

xinexine-libMatch1rc8

xinexine-libMatch1.0

xinexine-libMatch1.0.1

xinexine-libMatch1.0.2

xinexine-libMatch1.0.3a

xinexine-libMatch1.1.0

xinexine-libMatch1.1.1

xinexine-libMatch1.1.2

xinexine-libMatch1.1.3

xinexine-libMatch1.1.4

xinexine-libMatch1.1.5

xinexine-libMatch1.1.6

xinexine-libMatch1.1.7

xinexine-libMatch1.1.8

xinexine-libMatch1.1.9

xinexine-libMatch1.1.9.1

xinexine-libMatch1.1.10

xinexine-libMatch1.1.10.1

xinexine-libMatch1.1.11

xinexine-libMatch1.1.11.1

xinexine-libMatch1.1.12

xinexine-libMatch1.1.13

VendorProductVersionCPE
xinexine-lib*cpe:2.3:a:xine:xine-lib:*:*:*:*:*:*:*:*
xinexine-lib0.9.8cpe:2.3:a:xine:xine-lib:0.9.8:*:*:*:*:*:*:*
xinexine-lib0.9.13cpe:2.3:a:xine:xine-lib:0.9.13:*:*:*:*:*:*:*
xinexine-lib0.99cpe:2.3:a:xine:xine-lib:0.99:*:*:*:*:*:*:*
xinexine-lib1cpe:2.3:a:xine:xine-lib:1:rc0a:*:*:*:*:*:*
xinexine-lib1cpe:2.3:a:xine:xine-lib:1:rc1:*:*:*:*:*:*
xinexine-lib1cpe:2.3:a:xine:xine-lib:1:rc2:*:*:*:*:*:*
xinexine-lib1cpe:2.3:a:xine:xine-lib:1:rc3:*:*:*:*:*:*
xinexine-lib1cpe:2.3:a:xine:xine-lib:1:rc3a:*:*:*:*:*:*
xinexine-lib1cpe:2.3:a:xine:xine-lib:1:rc3b:*:*:*:*:*:*

Vendor	Product	Version	CPE
xine	xine-lib	*	cpe:2.3:a:xine:xine-lib::::::::
xine	xine-lib	0.9.8	cpe:2.3:a:xine:xine-lib:0.9.8:::::::*
xine	xine-lib	0.9.13	cpe:2.3:a:xine:xine-lib:0.9.13:::::::*
xine	xine-lib	0.99	cpe:2.3:a:xine:xine-lib:0.99:::::::*
xine	xine-lib	1	cpe:2.3:a:xine:xine-lib:1:rc0a::::::
xine	xine-lib	1	cpe:2.3:a:xine:xine-lib:1:rc1::::::
xine	xine-lib	1	cpe:2.3:a:xine:xine-lib:1:rc2::::::
xine	xine-lib	1	cpe:2.3:a:xine:xine-lib:1:rc3::::::
xine	xine-lib	1	cpe:2.3:a:xine:xine-lib:1:rc3a::::::
xine	xine-lib	1	cpe:2.3:a:xine:xine-lib:1:rc3b::::::