Lucene search

MitreCVE-2008-5235

HistoryNov 26, 2008 - 1:30 a.m.

CVE-2008-5235

2008-11-2601:30:00

CWE-119

mitre

web.nvd.nist.gov

cve-2008-5235

buffer overflow

xine-lib

demuxers

real media

security vulnerability

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

High

EPSS

0.06

Percentile

93.5%

JSON

Heap-based buffer overflow in the demux_real_send_chunk function in src/demuxers/demux_real.c in xine-lib before 1.1.15 allows remote attackers to execute arbitrary code via a crafted Real Media file. NOTE: some of these details are obtained from third party information.

Affected configurations

Nvd

Node

xinexineRange≤1.1.4

xinexineMatch0.9.13

xinexineMatch1beta1

xinexineMatch1beta10

xinexineMatch1beta11

xinexineMatch1beta12

xinexineMatch1beta2

xinexineMatch1beta3

xinexineMatch1beta4

xinexineMatch1beta5

xinexineMatch1beta6

xinexineMatch1beta7

xinexineMatch1beta8

xinexineMatch1beta9

xinexineMatch1rc0a

xinexineMatch1rc1

xinexineMatch1rc2

xinexineMatch1rc3

xinexineMatch1rc3a

xinexineMatch1rc3b

xinexineMatch1rc3c

xinexineMatch1rc4

xinexineMatch1rc4a

xinexineMatch1rc5

xinexineMatch1rc6a

xinexineMatch1rc7

xinexineMatch1rc8

xinexineMatch1.0

xinexineMatch1.0.1

xinexineMatch1.0.2

xinexineMatch1.0.3a

xinexineMatch1.1.0

xinexineMatch1.1.1

xinexineMatch1.1.2

xinexineMatch1.1.3

xinexineMatch1.1.10.1

xinexineMatch1.1.11

xinexineMatch1.1.11.1

VendorProductVersionCPE
xinexine*cpe:2.3:a:xine:xine:*:*:*:*:*:*:*:*
xinexine0.9.13cpe:2.3:a:xine:xine:0.9.13:*:*:*:*:*:*:*
xinexine1cpe:2.3:a:xine:xine:1:beta1:*:*:*:*:*:*
xinexine1cpe:2.3:a:xine:xine:1:beta10:*:*:*:*:*:*
xinexine1cpe:2.3:a:xine:xine:1:beta11:*:*:*:*:*:*
xinexine1cpe:2.3:a:xine:xine:1:beta12:*:*:*:*:*:*
xinexine1cpe:2.3:a:xine:xine:1:beta2:*:*:*:*:*:*
xinexine1cpe:2.3:a:xine:xine:1:beta3:*:*:*:*:*:*
xinexine1cpe:2.3:a:xine:xine:1:beta4:*:*:*:*:*:*
xinexine1cpe:2.3:a:xine:xine:1:beta5:*:*:*:*:*:*

Vendor	Product	Version	CPE
xine	xine	*	cpe:2.3:a:xine:xine::::::::
xine	xine	0.9.13	cpe:2.3:a:xine:xine:0.9.13:::::::*
xine	xine	1	cpe:2.3:a:xine:xine:1:beta1::::::
xine	xine	1	cpe:2.3:a:xine:xine:1:beta10::::::
xine	xine	1	cpe:2.3:a:xine:xine:1:beta11::::::
xine	xine	1	cpe:2.3:a:xine:xine:1:beta12::::::
xine	xine	1	cpe:2.3:a:xine:xine:1:beta2::::::
xine	xine	1	cpe:2.3:a:xine:xine:1:beta3::::::
xine	xine	1	cpe:2.3:a:xine:xine:1:beta4::::::
xine	xine	1	cpe:2.3:a:xine:xine:1:beta5::::::