CVE-2008-0073

Published Mar 24, 2008 CVSS 2.0 · 6.8 Medium EPSS 9.3% KEV · Not listed
Description
Array index error in the sdpplin_parse function in input/libreal/sdpplin.c in xine-lib 1.1.10.1 allows remote RTSP servers to execute arbitrary code via a large streamid SDP parameter.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-1536-1 New libxine packages fix several vulnerabilities
Debian DSA Debian DSA DSA-1543-1 New vlc packages fix several vulnerabilities
EUVD EUVD EUVD-2008-0086 Array index error in the sdpplin_parse function in input/libreal/sdpplin.c in xine-lib 1.1.10.1 allows remote RTSP servers to execute arbitrary code via a large streamid SDP parameter.
Ubuntu USN Ubuntu USN USN-635-1 xine-lib vulnerabilities
References
Link Providers
http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00008.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html cve-icon cve-icon
http://secunia.com/advisories/28694 cve-icon cve-icon
http://secunia.com/advisories/29392 cve-icon cve-icon
http://secunia.com/advisories/29472 cve-icon cve-icon
http://secunia.com/advisories/29503 cve-icon cve-icon
http://secunia.com/advisories/29578 cve-icon cve-icon
http://secunia.com/advisories/29601 cve-icon cve-icon
http://secunia.com/advisories/29740 cve-icon cve-icon
http://secunia.com/advisories/29766 cve-icon cve-icon
http://secunia.com/advisories/29800 cve-icon cve-icon
http://secunia.com/advisories/30581 cve-icon cve-icon
http://secunia.com/advisories/31372 cve-icon cve-icon
http://secunia.com/advisories/31393 cve-icon cve-icon
http://secunia.com/secunia_research/2008-10/ cve-icon cve-icon
http://security.gentoo.org/glsa/glsa-200804-25.xml cve-icon cve-icon
http://security.gentoo.org/glsa/glsa-200808-01.xml cve-icon cve-icon
http://sourceforge.net/project/shownotes.php?release_id=585488&group_id=9655 cve-icon cve-icon
http://wiki.videolan.org/Changelog/0.8.6f cve-icon cve-icon
http://www.debian.org/security/2008/dsa-1536 cve-icon cve-icon
http://www.debian.org/security/2008/dsa-1543 cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDVSA-2008:178 cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDVSA-2008:219 cve-icon cve-icon
http://www.securityfocus.com/bid/28312 cve-icon cve-icon
http://www.securitytracker.com/id?1019682 cve-icon cve-icon
http://www.slackware.org/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.392408 cve-icon cve-icon
http://www.ubuntu.com/usn/usn-635-1 cve-icon cve-icon
http://www.videolan.org/security/sa0803.php cve-icon cve-icon
http://www.vupen.com/english/advisories/2008/0923 cve-icon cve-icon
http://www.vupen.com/english/advisories/2008/0985 cve-icon cve-icon
http://xinehq.de/index.php/news cve-icon cve-icon
https://exchange.xforce.ibmcloud.com/vulnerabilities/41339 cve-icon cve-icon
https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00143.html cve-icon cve-icon
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00456.html cve-icon cve-icon
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
flexera
Published
Updated
Aug 7, 2024, 7:32 AM
Reserved
Jan 3, 2008, 12:00 AM
Status
Modified
Published
Mar 24, 2008, 10:44 PM
Modified
Jun 16, 2026, 10:48 PM