REDHAT-BUG-428620: Buffer Overflow
Common Vulnerabilities and Exposures assigned an identifier CVE-2008-0225 to the following vulnerability:
Heap-based buffer overflow in the rmffdumpcont function in input/libreal/rmff.c in xine-lib 1.1.9 and earlier allows remote attackers to execute arbitrary code via the SDP Abstract attribute, related to the rmffdumpheader function and related to disregarding the max field. NOTE: some of these details are obtained from third party information.
References:
http://aluigi.altervista.org/adv/xinermffhof-adv.txt http://secunia.com/advisories/28384
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-428620?
The severity of REDHAT-BUG-428620 is classified as high due to the potential for remote code execution.
How do I fix REDHAT-BUG-428620?
To fix REDHAT-BUG-428620, update xine-lib to a version later than 1.1.9.
What versions of xine-lib are affected by REDHAT-BUG-428620?
All versions of xine-lib up to and including 1.1.9 are affected by REDHAT-BUG-428620.
What is the cause of the vulnerability in REDHAT-BUG-428620?
The vulnerability in REDHAT-BUG-428620 is caused by a heap-based buffer overflow in the rmff_dump_cont function.
Can REDHAT-BUG-428620 be exploited remotely?
Yes, REDHAT-BUG-428620 can be exploited remotely, allowing an attacker to execute arbitrary code.