CVE-2008-1964: Buffer Overflow

Published Apr 25, 2008

Updated

DISPUTED Stack-based buffer overflow in the demuxnsfsendheaders function in src/demuxers/demuxnsf.c in xine-lib allows remote attackers to have an unknown impact via a long copyright field in an NSF header in an NES Sound file, a different issue than CVE-2008-1878. NOTE: a third party claims that the copyright field always has a safe length.

Affected Software

1 affected component

Xinehq Xine Lib

Event History

Apr 25, 2008

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Disputed

07:05 PM

Frequently Asked Questions

What is the severity of CVE-2008-1964?

CVE-2008-1964 is a disputed vulnerability that is reported to be capable of causing a stack-based buffer overflow.

How do I fix CVE-2008-1964?

To fix CVE-2008-1964, it is recommended to update xine-lib to the latest version that addresses this vulnerability.

What software is affected by CVE-2008-1964?

CVE-2008-1964 affects the xine-lib software, specifically through its handling of NSF headers in NES Sound files.

Can CVE-2008-1964 be exploited remotely?

Yes, CVE-2008-1964 can potentially be exploited remotely by attackers through specially crafted NES Sound files.

What impact does CVE-2008-1964 have?

The impact of CVE-2008-1964 is currently unknown but is associated with unauthorized execution or denial of service due to buffer overflow.