Integer overflow

2008-11-2601:30:00

PRIOn knowledge base

www.prio-n.com

6.4 Medium

AI Score

Confidence

Low

0.018 Low

EPSS

Percentile

88.2%

JSON

Integer underflow in demux_qt.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, allows remote attackers to cause a denial of service (crash) via a crafted media file that results in a small value of moov_atom_size in a compressed MOV (aka CMOV_ATOM).

CPENameOperatorVersion
xine-libeq1.1.10
xine-libeq1 rc3a
xine-libeq1.1.10.1
xine-libeq1.1.9.1
xine-libeq1.0.0-beta7
xine-libeq1.1.11
xine-libeq1 rc3
xine-libeq1.0.0-beta9
xine-libeq1.1.0
xine-libeq1.1.7

Name	Operator	Version
xine-lib	eq	1.1.10
xine-lib	eq	1 rc3a
xine-lib	eq	1.1.10.1
xine-lib	eq	1.1.9.1
xine-lib	eq	1.0.0-beta7
xine-lib	eq	1.1.11
xine-lib	eq	1 rc3
xine-lib	eq	1.0.0-beta9
xine-lib	eq	1.1.0
xine-lib	eq	1.1.7