CVE-2008-0225: Buffer Overflow
Common Vulnerabilities and Exposures assigned an identifier CVE-2008-0225 to the following vulnerability:
Heap-based buffer overflow in the rmffdumpcont function in input/libreal/rmff.c in xine-lib 1.1.9 and earlier allows remote attackers to execute arbitrary code via the SDP Abstract attribute, related to the rmffdumpheader function and related to disregarding the max field. NOTE: some of these details are obtained from third party information.
References:
http://aluigi.altervista.org/adv/xinermffhof-adv.txt http://secunia.com/advisories/28384
Other sources
Heap-based buffer overflow in the rmffdumpcont function in input/libreal/rmff.c in xine-lib 1.1.9 and earlier allows remote attackers to execute arbitrary code via the SDP Abstract attribute in an RTSP session, related to the rmffdumpheader function and related to disregarding the max field. NOTE: some of these details are obtained from third party information.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-0225?
CVE-2008-0225 is classified as a critical vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2008-0225?
To fix CVE-2008-0225, upgrade to a newer version of xine-lib that has addressed this buffer overflow issue.
What software is affected by CVE-2008-0225?
CVE-2008-0225 affects xine-lib versions 1.1.9 and earlier.
Can CVE-2008-0225 be exploited remotely?
Yes, CVE-2008-0225 can be exploited remotely during an RTSP session.
What is the impact of CVE-2008-0225?
The impact of CVE-2008-0225 includes potential execution of arbitrary code on the affected system.