CVE-2008-1878

Stack-based buffer overflow in the demux_nsf_send_chunk function in src/demuxers/demux_nsf.c in xine-lib 1.1.12 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long NSF title.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 89%
VendorProductVersion
xinexine-lib
𝑥
≤ 1.1.12
xinexine-lib
1.1.0
xinexine-lib
1.1.1
xinexine-lib
1.1.9
xinexine-lib
1.1.10
xinexine-lib
1.1.10.1
xinexine-lib
1.1.11
xinexine-lib
1.1.11.1
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
xine-lib
hardy
Fixed 1.1.11.1-1ubuntu3.1
released
gutsy
Fixed 1.1.7-1ubuntu1.3
released
feisty
Fixed 1.1.4-2ubuntu3.1
released
dapper
Fixed 1.1.1+ubuntu2-7.9
released
References