CVE-2008-0225
10.01.2008, 23:46
Heap-based buffer overflow in the rmff_dump_cont function in input/libreal/rmff.c in xine-lib 1.1.9 and earlier allows remote attackers to execute arbitrary code via the SDP Abstract attribute in an RTSP session, related to the rmff_dump_header function and related to disregarding the max field. NOTE: some of these details are obtained from third party information.Enginsight
| Vendor | Product | Version |
|---|---|---|
| xine | xine-lib | 𝑥 ≤ 1.1.9 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| mplayer |
| ||||||||||
| xine-lib |
|
Common Weakness Enumeration
References