CVE-2009-1274: Buffer Overflow

Published Apr 8, 2009

Updated

Integer overflow in the qterror parsetrakatom function in demuxers/demuxqt.c in xine-lib 1.1.16.2 and earlier allows remote attackers to execute arbitrary code via a Quicktime movie file with a large count value in an STTS atom, which triggers a heap-based buffer overflow.

Affected Software

12 affected components

xine Xine-lib=1.1.10

xine Xine-lib=1.1.10.1

xine Xine-lib=1.1.11

xine Xine-lib=1.1.0

xine Xine-lib=1.1.12

xine Xine-lib=1.1.13

xine Xine-lib=1.1.11.1

xine Xine-lib=1.1.16.1

xine Xine-lib=1.1.16.2

xine Xine-lib=1.1.15

xine Xine-lib=1.1.14

xine Xine-lib=1.1.1

Event History

Apr 8, 2009

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2009-1274?

CVE-2009-1274 has a high severity due to its potential to allow remote attackers to execute arbitrary code.

How do I fix CVE-2009-1274?

To fix CVE-2009-1274, upgrade to xine-lib version 1.1.16.3 or later, which addresses this vulnerability.

What causes CVE-2009-1274?

CVE-2009-1274 is caused by an integer overflow in the qt_error parse_trak_atom function, leading to a heap-based buffer overflow.

Which software versions are affected by CVE-2009-1274?

CVE-2009-1274 affects xine-lib versions 1.1.10 through 1.1.16.2.

Can CVE-2009-1274 be exploited through a malicious movie file?

Yes, CVE-2009-1274 can be exploited by attackers using specially crafted Quicktime movie files.