Test Kennung:	1.3.6.1.4.1.25623.1.0.900041
Kategorie:	Buffer overflow
Titel:	xine-lib < 1.1.16.1 Multiple Vulnerabilities
Zusammenfassung:	xine-lib is prone to multiple vulnerabilities.
Beschreibung:	Summary: xine-lib is prone to multiple vulnerabilities. Vulnerability Insight: The flaws are due to overflow errors that exist in open_ra_file() in demux_realaudio.c, parse_block_group() in demux_matroska.c, and real_parse_audio_specific_data() in demux_real.c methods. Vulnerability Impact: Remote exploitation could allow execution of arbitrary code to cause head-based buffer overflow via a specially crafted RealAudio or Matroska file. Affected Software/OS: xine-lib versions 1.1.15 and prior. Solution: Update to version 1.1.16.1 or later. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2008-5236 BugTraq ID: 30797 http://www.securityfocus.com/bid/30797 Bugtraq: 20080822 [oCERT-2008-008] multiple heap overflows in xine-lib (Google Search) http://www.securityfocus.com/archive/1/495674/100/0/threaded https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00385.html https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00174.html https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00555.html http://www.mandriva.com/security/advisories?name=MDVSA-2009:020 http://sourceforge.net/project/shownotes.php?release_id=619869 http://www.ocert.org/analysis/2008-008/analysis.txt http://www.osvdb.org/47744 http://secunia.com/advisories/31502 http://secunia.com/advisories/31567 http://secunia.com/advisories/31827 http://secunia.com/advisories/33544 http://securityreason.com/securityalert/4648 SuSE Security Announcement: SUSE-SR:2009:004 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html http://www.vupen.com/english/advisories/2008/2382 http://www.vupen.com/english/advisories/2008/2427 XForce ISS Database: xinelib-openrafile-bo(44642) https://exchange.xforce.ibmcloud.com/vulnerabilities/44642 XForce ISS Database: xinelib-parseblockgroup-bo(44634) https://exchange.xforce.ibmcloud.com/vulnerabilities/44634
Copyright	Copyright (C) 2008 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.