Lucene search
HistoryNov 26, 2008 - 1:30 a.m.
CVE-2008-5248
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
6.4 Medium
AI Score
Confidence
High
0.007 Low
EPSS
Percentile
80.3%
xine-lib before 1.1.15 allows remote attackers to cause a denial of service (crash) via “MP3 files with metadata consisting only of separators.”
Affected configurations
Node
xinexine-libRange≤1.1.15
ORxinexine-libMatch0.9.13
ORxinexine-libMatch1rc0a
ORxinexine-libMatch1rc1
ORxinexine-libMatch1rc2
ORxinexine-libMatch1rc3
ORxinexine-libMatch1rc3a
ORxinexine-libMatch1rc3b
ORxinexine-libMatch1rc3c
ORxinexine-libMatch1rc4
ORxinexine-libMatch1rc4a
ORxinexine-libMatch1rc5
ORxinexine-libMatch1rc6a
ORxinexine-libMatch1rc7
ORxinexine-libMatch1rc8
ORxinexine-libMatch1.0
ORxinexine-libMatch1.0.1
ORxinexine-libMatch1.0.2
ORxinexine-libMatch1.0.3a
ORxinexine-libMatch1.1.0
ORxinexine-libMatch1.1.1
ORxinexine-libMatch1.1.2
ORxinexine-libMatch1.1.3
ORxinexine-libMatch1.1.4
ORxinexine-libMatch1.1.5
ORxinexine-libMatch1.1.6
ORxinexine-libMatch1.1.7
ORxinexine-libMatch1.1.8
ORxinexine-libMatch1.1.9
ORxinexine-libMatch1.1.9.1
ORxinexine-libMatch1.1.10
ORxinexine-libMatch1.1.10.1
ORxinexine-libMatch1.1.11
ORxinexine-libMatch1.1.11.1
ORxinexine-libMatch1.1.12
ORxinexine-libMatch1.1.13
ORxinexine-libMatch1.1.14
ORxinexine-libMatch1_beta1
ORxinexine-libMatch1_beta2
ORxinexine-libMatch1_beta3
ORxinexine-libMatch1_beta4
ORxinexine-libMatch1_beta5
ORxinexine-libMatch1_beta6
ORxinexine-libMatch1_beta7
ORxinexine-libMatch1_beta8
ORxinexine-libMatch1_beta9
ORxinexine-libMatch1_beta10
ORxinexine-libMatch1_beta11
ORxinexine-libMatch1_beta12
Related
cve
cve
CVE-2008-5248
2008-11-26 01:30:00
debiancve
debiancve
CVE-2008-5248
2008-11-26 01:30:00
prion
prion
Code injection
2008-11-26 01:30:00
cvelist
cvelist
CVE-2008-5248
2008-11-26 01:00:00
ubuntucve
ubuntucve
CVE-2008-5248
2008-11-26 00:00:00
openvas
openvas
Mandriva Security Advisory MDVSA-2009:298 (xine-lib)
2009-11-17 00:00:00
Mandriva Security Advisory MDVSA-2009:298 (xine-lib)
2009-11-17 00:00:00
Ubuntu: Security Advisory (USN-710-1)
2009-02-02 00:00:00
nessus
nessus
SuSE 10 Security Update : xine (ZYPP Patch Number 5965)
2011-01-27 00:00:00
openSUSE 10 Security Update : xine-devel (xine-devel-5966)
2009-02-05 00:00:00
ubuntu
ubuntu
xine-lib vulnerabilities
2009-01-26 00:00:00
gentoo
gentoo
xine-lib: User-assisted execution of arbitrary code
2010-06-01 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
6.4 Medium
AI Score
Confidence
High
0.007 Low
EPSS
Percentile
80.3%
Related for NVD:CVE-2008-5248