CVE-2008-5238: Integer Overflow
Published Nov 26, 2008
·Updated
Integer overflow in the realparsemdpr function in demuxreal.c in xine-lib 1.1.12, and other versions before 1.1.15, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted streamnamesize field.
Affected Software
39 affected components
xine xine<=1.1.14
xine xine=0.9.13
xine xine=1-beta1
xine xine=1-beta10
xine xine=1-beta11
xine xine=1-beta12
xine xine=1-beta2
xine xine=1-beta3
xine xine=1-beta4
xine xine=1-beta5
xine xine=1-beta6
xine xine=1-beta7
xine xine=1-beta8
xine xine=1-beta9
xine xine=1-rc0a
xine xine=1-rc1
xine xine=1-rc2
xine xine=1-rc3
xine xine=1-rc3a
xine xine=1-rc3b
xine xine=1-rc3c
xine xine=1-rc4
xine xine=1-rc4a
xine xine=1-rc5
xine xine=1-rc6a
xine xine=1-rc7
xine xine=1-rc8
xine xine=1.0
xine xine=1.0.1
xine xine=1.0.2
xine xine=1.0.3a
xine xine=1.1.0
xine xine=1.1.1
xine xine=1.1.2
xine xine=1.1.3
xine xine=1.1.4
xine xine=1.1.10.1
xine xine=1.1.11
xine xine=1.1.11.1
Event History
Nov 26, 2008
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What kind of exploitation can result from CVE-2008-5238?
Exploiting CVE-2008-5238 can lead to a crash of the application or possibly allow attackers to execute arbitrary code on the system.