CVE-2008-0238: Buffer Overflow
Multiple heap-based buffer overflows in the rmffdumpcont function in input/libreal/rmff.c in xine-lib 1.1.9 allow remote attackers to execute arbitrary code via the SDP (1) Title, (2) Author, or (3) Copyright attribute, related to the rmffdumpheader function, different vectors than CVE-2008-0225. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-0238?
CVE-2008-0238 is considered a critical vulnerability due to its ability to allow remote attackers to execute arbitrary code.
How do I fix CVE-2008-0238?
To fix CVE-2008-0238, upgrade the xine-lib to version 1.1.10 or later.
What software is affected by CVE-2008-0238?
CVE-2008-0238 affects xine-lib versions up to and including 1.1.9.
How can attackers exploit CVE-2008-0238?
Attackers can exploit CVE-2008-0238 by sending specially crafted SDP data that trigger heap-based buffer overflows.
Is CVE-2008-0238 related to any other vulnerabilities?
Yes, CVE-2008-0238 is related to CVE-2008-0225, though it involves different exploitation vectors.