CVE-2008-5248: Input Validation
Published Nov 26, 2008
·Updated
xine-lib before 1.1.15 allows remote attackers to cause a denial of service (crash) via "MP3 files with metadata consisting only of separators."
Affected Software
49 affected components
xine Xine-lib<=1.1.15
xine Xine-lib=0.9.13
xine Xine-lib=1-rc0a
xine Xine-lib=1-rc1
xine Xine-lib=1-rc2
xine Xine-lib=1-rc3
xine Xine-lib=1-rc3a
xine Xine-lib=1-rc3b
xine Xine-lib=1-rc3c
xine Xine-lib=1-rc4
xine Xine-lib=1-rc4a
xine Xine-lib=1-rc5
xine Xine-lib=1-rc6a
xine Xine-lib=1-rc7
xine Xine-lib=1-rc8
xine Xine-lib=1.0
xine Xine-lib=1.0.1
xine Xine-lib=1.0.2
xine Xine-lib=1.0.3a
xine Xine-lib=1.1.0
xine Xine-lib=1.1.1
xine Xine-lib=1.1.2
xine Xine-lib=1.1.3
xine Xine-lib=1.1.4
xine Xine-lib=1.1.5
xine Xine-lib=1.1.6
xine Xine-lib=1.1.7
xine Xine-lib=1.1.8
xine Xine-lib=1.1.9
xine Xine-lib=1.1.9.1
xine Xine-lib=1.1.10
xine Xine-lib=1.1.10.1
xine Xine-lib=1.1.11
xine Xine-lib=1.1.11.1
xine Xine-lib=1.1.12
xine Xine-lib=1.1.13
xine Xine-lib=1.1.14
xine Xine-lib=1_beta1
xine Xine-lib=1_beta2
xine Xine-lib=1_beta3
xine Xine-lib=1_beta4
xine Xine-lib=1_beta5
xine Xine-lib=1_beta6
xine Xine-lib=1_beta7
xine Xine-lib=1_beta8
xine Xine-lib=1_beta9
xine Xine-lib=1_beta10
xine Xine-lib=1_beta11
xine Xine-lib=1_beta12
Event History
Nov 26, 2008
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-5248?
CVE-2008-5248 is classified as a denial of service vulnerability.
2
How do I fix CVE-2008-5248?
To fix CVE-2008-5248, upgrade xine-lib to version 1.1.15 or higher.
3
What types of files can exploit CVE-2008-5248?
CVE-2008-5248 can be exploited by MP3 files that contain metadata consisting only of separators.
4
What versions of xine-lib are affected by CVE-2008-5248?
Versions of xine-lib prior to 1.1.15 are affected by CVE-2008-5248.
5
What are the consequences of CVE-2008-5248?
The consequences of CVE-2008-5248 include the potential crashing of the xine-lib application.