CVE-2008-1482: Buffer Overflow
Multiple buffer overflow flaws were discovered in xine-lib.
The vulnerabilities are caused due to integer overflow errors when allocating memory in src/demuxers/demuxflv.c, src/demuxers/demuxqt.c, src/demuxers/demuxreal.c, src/demuxers/demuxwc3movie.c, src/demuxers/ebml.c, and src/demuxers/demuxfilm.c. These can be exploited to cause heap-based buffer overflows via overly large fields included in e.g. FLV, MOV, RM, MVE, MKV, and CAK files.
See original advisory for details:
http://aluigi.altervista.org/adv/xinehof-adv.txt
Gentoo:
FWIW, they should all be fixed in 1.2 series, I suppose backporting the relevant changes, if possible, would solve the issue. 1.2 makes good use of calloc rather than using malloc directly.
Other sources
Multiple integer overflows in xine-lib 1.1.11 and earlier allow remote attackers to trigger heap-based buffer overflows and possibly execute arbitrary code via (1) a crafted .FLV file, which triggers an overflow in demuxers/demuxflv.c; (2) a crafted .MOV file, which triggers an overflow in demuxers/demuxqt.c; (3) a crafted .RM file, which triggers an overflow in demuxers/demuxreal.c; (4) a crafted .MVE file, which triggers an overflow in demuxers/demuxwc3movie.c; (5) a crafted .MKV file, which triggers an overflow in demuxers/ebml.c; or (6) a crafted .CAK file, which triggers an overflow in demuxers/demuxfilm.c.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-1482?
CVE-2008-1482 has a high severity due to the potential for remote code execution through heap-based buffer overflows.
How do I fix CVE-2008-1482?
To fix CVE-2008-1482, update xine-lib to version 1.1.11.1 or later to address the integer overflow issues.
Which versions of xine-lib are affected by CVE-2008-1482?
CVE-2008-1482 affects xine-lib versions 1.1.11 and earlier.
What types of files can exploit CVE-2008-1482?
CVE-2008-1482 can be exploited using crafted .FLV and .MOV files that trigger buffer overflows.
Who can be impacted by CVE-2008-1482?
Users and applications utilizing xine-lib versions 1.1.11 and earlier are at risk of exploitation through malicious media files.