CVE-2009-0698

Integer overflow in the 4xm demuxer (demuxers/demux_4xm.c) in xine-lib 1.1.16.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a 4X movie file with a large current_track value, a similar issue to CVE-2009-0385.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 84%
VendorProductVersion
xinexine-lib
1.1.16.1
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
vlc
bullseye (security)
3.0.21-0+deb11u1
fixed
bullseye
3.0.21-0+deb11u1
fixed
bookworm
3.0.21-0+deb12u1
fixed
bookworm (security)
3.0.21-0+deb12u1
fixed
sid
3.0.21-2
fixed
trixie
3.0.21-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
xine-lib
intrepid
Fixed 1.1.15-0ubuntu3.2
released
hardy
Fixed 1.1.11.1-1ubuntu3.3
released
gutsy
Fixed 1.1.7-1ubuntu1.5
released
dapper
Fixed 1.1.1+ubuntu2-7.11
released
Common Weakness Enumeration
References
http://bugs.xine-project.org/show_bug.cgi?id=205
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html
http://sourceforge.net/project/shownotes.php?release_id=660071
http://www.mandriva.com/security/advisories?name=MDVSA-2009:298
http://www.mandriva.com/security/advisories?name=MDVSA-2009:299
http://www.securityfocus.com/archive/1/500514/100/0/threaded
http://www.trapkit.de/advisories/TKADV2009-004.txt
http://www.ubuntu.com/usn/USN-746-1
https://exchange.xforce.ibmcloud.com/vulnerabilities/48954
http://bugs.xine-project.org/show_bug.cgi?id=205
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html
http://sourceforge.net/project/shownotes.php?release_id=660071
http://www.mandriva.com/security/advisories?name=MDVSA-2009:298
http://www.mandriva.com/security/advisories?name=MDVSA-2009:299
http://www.securityfocus.com/archive/1/500514/100/0/threaded
http://www.trapkit.de/advisories/TKADV2009-004.txt
http://www.ubuntu.com/usn/USN-746-1
https://exchange.xforce.ibmcloud.com/vulnerabilities/48954