CVE-2008-3231

xine-lib before 1.1.15 allows remote attackers to cause a denial of service (crash) via a crafted OGG file, as demonstrated by playing lol-ffplay.ogg with xine.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 82%
VendorProductVersion
xinexine-lib
𝑥
≤ 1.1.14
xinexine-lib
0.9.8
xinexine-lib
0.9.13
xinexine-lib
0.99
xinexine-lib
1.0
xinexine-lib
1.0.1
xinexine-lib
1.0.2
xinexine-lib
1.0.3a:a
xinexine-lib
1.1.0
xinexine-lib
1.1.1
xinexine-lib
1.1.2
xinexine-lib
1.1.3
xinexine-lib
1.1.4
xinexine-lib
1.1.5
xinexine-lib
1.1.6
xinexine-lib
1.1.7
xinexine-lib
1.1.8
xinexine-lib
1.1.9
xinexine-lib
1.1.9.1
xinexine-lib
1.1.10
xinexine-lib
1.1.10.1
xinexine-lib
1.1.11
xinexine-lib
1.1.11.1
xinexine-lib
1.1.12
xinexine-lib
1.1.13
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
xine-lib
intrepid
not-affected
hardy
Fixed 1.1.11.1-1ubuntu3.2
released
gutsy
Fixed 1.1.7-1ubuntu1.4
released
feisty
ignored
dapper
Fixed 1.1.1+ubuntu2-7.10
released