Skip to content

CVE-2008-5235 Heap-based buffer overflow in the demux_real_send_chunk function in src/demuxers/demux_real.c in xine-lib before 1.1.15 allows remote attackers to execute arbitrary code via a crafted Real Media file....

HighCVSS 9.3 EPSS 4.6%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Heap-based buffer overflow in the demux_real_send_chunk function in src/demuxers/demux_real.c in xine-lib before 1.1.15 allows remote attackers to execute arbitrary code via a crafted Real Media file. NOTE: some of these details are obtained from third party information.

Affected products

ProductAffected versionsFixed in
xine <= 1.1.4 No fix listed
xine = 0.9.13 No fix listed
xine = 1-beta1 No fix listed
xine = 1-beta10 No fix listed
xine = 1-beta11 No fix listed
xine = 1-beta12 No fix listed
xine = 1-beta2 No fix listed
xine = 1-beta3 No fix listed
xine = 1-beta4 No fix listed
xine = 1-beta5 No fix listed
xine = 1-beta6 No fix listed
xine = 1-beta7 No fix listed
xine = 1-beta8 No fix listed
xine = 1-beta9 No fix listed
xine = 1-rc0a No fix listed
xine = 1-rc1 No fix listed
xine = 1-rc2 No fix listed
xine = 1-rc3 No fix listed
xine = 1-rc3a No fix listed
xine = 1-rc3b No fix listed
xine = 1-rc3c No fix listed
xine = 1-rc4 No fix listed
xine = 1-rc4a No fix listed
xine = 1-rc5 No fix listed
xine = 1-rc6a No fix listed
Show 13 more
ProductAffected versionsFixed in
xine = 1-rc7 No fix listed
xine = 1-rc8 No fix listed
xine = 1.0 No fix listed
xine = 1.0.1 No fix listed
xine = 1.0.2 No fix listed
xine = 1.0.3a No fix listed
xine = 1.1.0 No fix listed
xine = 1.1.1 No fix listed
xine = 1.1.2 No fix listed
xine = 1.1.3 No fix listed
xine = 1.1.10.1 No fix listed
xine = 1.1.11 No fix listed
xine = 1.1.11.1 No fix listed

References