CVE-2008-5243

Published Nov 26, 2008 CVSS 2.0 · 4.3 Medium EPSS 1.8% KEV · Not listed
Description
The real_parse_headers function in demux_real.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, relies on an untrusted input length value to "reindex into an allocated buffer," which allows remote attackers to cause a denial of service (crash) via a crafted value, probably an array index error.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2008-5220 The real_parse_headers function in demux_real.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, relies on an untrusted input length value to "reindex into an allocated buffer," which allows remote attackers to cause a denial of service (crash) via a crafted value, probably an array index error.
Ubuntu USN Ubuntu USN USN-710-1 xine-lib vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 10:49 AM
Reserved
Nov 25, 2008, 12:00 AM
Status
Modified
Published
Nov 26, 2008, 1:30 AM
Modified
Jun 16, 2026, 10:59 PM