CVE-2008-5248

xine-lib before 1.1.15 allows remote attackers to cause a denial of service (crash) via "MP3 files with metadata consisting only of separators."
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 67%
VendorProductVersion
xinexine-lib
𝑥
≤ 1.1.15
xinexine-lib
0.9.13
xinexine-lib
1.0
xinexine-lib
1.0.1
xinexine-lib
1.0.2
xinexine-lib
1.0.3a:a
xinexine-lib
1.1.0
xinexine-lib
1.1.1
xinexine-lib
1.1.2
xinexine-lib
1.1.3
xinexine-lib
1.1.4
xinexine-lib
1.1.5
xinexine-lib
1.1.6
xinexine-lib
1.1.7
xinexine-lib
1.1.8
xinexine-lib
1.1.9
xinexine-lib
1.1.9.1
xinexine-lib
1.1.10
xinexine-lib
1.1.10.1
xinexine-lib
1.1.11
xinexine-lib
1.1.11.1
xinexine-lib
1.1.12
xinexine-lib
1.1.13
xinexine-lib
1.1.14
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
vlc
bullseye (security)
3.0.21-0+deb11u1
fixed
bullseye
3.0.21-0+deb11u1
fixed
bookworm
3.0.21-0+deb12u1
fixed
bookworm (security)
3.0.21-0+deb12u1
fixed
sid
3.0.21-2
fixed
trixie
3.0.21-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
xine-lib
intrepid
not-affected
hardy
Fixed 1.1.11.1-1ubuntu3.2
released
gutsy
Fixed 1.1.7-1ubuntu1.4
released
dapper
Fixed 1.1.1+ubuntu2-7.10
released