Lucene search

MitreCVE-2008-5243

HistoryNov 26, 2008 - 1:30 a.m.

CVE-2008-5243

2008-11-2601:30:00

CWE-20

mitre

web.nvd.nist.gov

cve-2008-5243

xine-lib

demux_real.c

denial of service

buffer overflow

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

7.1

Confidence

High

EPSS

0.257

Percentile

96.7%

JSON

The real_parse_headers function in demux_real.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, relies on an untrusted input length value to “reindex into an allocated buffer,” which allows remote attackers to cause a denial of service (crash) via a crafted value, probably an array index error.

Affected configurations

Nvd

Node

xinexine-libRange≤1.1.15

xinexine-libMatch0.9.13

xinexine-libMatch1rc0a

xinexine-libMatch1rc1

xinexine-libMatch1rc2

xinexine-libMatch1rc3

xinexine-libMatch1rc3a

xinexine-libMatch1rc3b

xinexine-libMatch1rc3c

xinexine-libMatch1rc4

xinexine-libMatch1rc4a

xinexine-libMatch1rc5

xinexine-libMatch1rc6a

xinexine-libMatch1rc7

xinexine-libMatch1rc8

xinexine-libMatch1.0

xinexine-libMatch1.0.1

xinexine-libMatch1.0.2

xinexine-libMatch1.0.3a

xinexine-libMatch1.1.0

xinexine-libMatch1.1.1

xinexine-libMatch1.1.2

xinexine-libMatch1.1.3

xinexine-libMatch1.1.4

xinexine-libMatch1.1.5

xinexine-libMatch1.1.6

xinexine-libMatch1.1.7

xinexine-libMatch1.1.8

xinexine-libMatch1.1.9

xinexine-libMatch1.1.9.1

xinexine-libMatch1.1.10

xinexine-libMatch1.1.10.1

xinexine-libMatch1.1.11

xinexine-libMatch1.1.11.1

xinexine-libMatch1.1.12

xinexine-libMatch1.1.13

xinexine-libMatch1.1.14

xinexine-libMatch1_beta1

xinexine-libMatch1_beta2

xinexine-libMatch1_beta3

xinexine-libMatch1_beta4

xinexine-libMatch1_beta5

xinexine-libMatch1_beta6

xinexine-libMatch1_beta7

xinexine-libMatch1_beta8

xinexine-libMatch1_beta9

xinexine-libMatch1_beta10

xinexine-libMatch1_beta11

xinexine-libMatch1_beta12

VendorProductVersionCPE
xinexine-lib*cpe:2.3:a:xine:xine-lib:*:*:*:*:*:*:*:*
xinexine-lib0.9.13cpe:2.3:a:xine:xine-lib:0.9.13:*:*:*:*:*:*:*
xinexine-lib1cpe:2.3:a:xine:xine-lib:1:rc0a:*:*:*:*:*:*
xinexine-lib1cpe:2.3:a:xine:xine-lib:1:rc1:*:*:*:*:*:*
xinexine-lib1cpe:2.3:a:xine:xine-lib:1:rc2:*:*:*:*:*:*
xinexine-lib1cpe:2.3:a:xine:xine-lib:1:rc3:*:*:*:*:*:*
xinexine-lib1cpe:2.3:a:xine:xine-lib:1:rc3a:*:*:*:*:*:*
xinexine-lib1cpe:2.3:a:xine:xine-lib:1:rc3b:*:*:*:*:*:*
xinexine-lib1cpe:2.3:a:xine:xine-lib:1:rc3c:*:*:*:*:*:*
xinexine-lib1cpe:2.3:a:xine:xine-lib:1:rc4:*:*:*:*:*:*

Vendor	Product	Version	CPE
xine	xine-lib	*	cpe:2.3:a:xine:xine-lib::::::::
xine	xine-lib	0.9.13	cpe:2.3:a:xine:xine-lib:0.9.13:::::::*
xine	xine-lib	1	cpe:2.3:a:xine:xine-lib:1:rc0a::::::
xine	xine-lib	1	cpe:2.3:a:xine:xine-lib:1:rc1::::::
xine	xine-lib	1	cpe:2.3:a:xine:xine-lib:1:rc2::::::
xine	xine-lib	1	cpe:2.3:a:xine:xine-lib:1:rc3::::::
xine	xine-lib	1	cpe:2.3:a:xine:xine-lib:1:rc3a::::::
xine	xine-lib	1	cpe:2.3:a:xine:xine-lib:1:rc3b::::::
xine	xine-lib	1	cpe:2.3:a:xine:xine-lib:1:rc3c::::::
xine	xine-lib	1	cpe:2.3:a:xine:xine-lib:1:rc4::::::