← Zuruck zu CVEs

CVE-2009-1274

N/A

Beschreibung

Integer overflow in the qt_error parse_trak_atom function in demuxers/demux_qt.c in xine-lib 1.1.16.2 and earlier allows remote attackers to execute arbitrary code via a Quicktime movie file with a large count value in an STTS atom, which triggers a heap-based buffer overflow.

CVE Details

CVSS v3.1 BewertungN/A

Veroffentlicht4/8/2009

Zuletzt geandert4/23/2026

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

xine:xine-lib

Schwachen (CWE)

CWE-119

Referenzen

http://bugs.xine-project.org/show_bug.cgi?id=224(cve@mitre.org)

http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html(cve@mitre.org)

http://osvdb.org/53288(cve@mitre.org)

http://secunia.com/advisories/34593(cve@mitre.org)

http://secunia.com/advisories/34712(cve@mitre.org)

http://secunia.com/advisories/35416(cve@mitre.org)

http://sourceforge.net/project/shownotes.php?group_id=9655&release_id=673233(cve@mitre.org)

http://www.mandriva.com/security/advisories?name=MDVSA-2009:298(cve@mitre.org)

http://www.mandriva.com/security/advisories?name=MDVSA-2009:299(cve@mitre.org)

http://www.securityfocus.com/archive/1/502481/100/0/threaded(cve@mitre.org)

http://www.securityfocus.com/bid/34384(cve@mitre.org)

http://www.securitytracker.com/id?1021989(cve@mitre.org)

http://www.trapkit.de/advisories/TKADV2009-005.txt(cve@mitre.org)

http://www.vupen.com/english/advisories/2009/0937(cve@mitre.org)

https://exchange.xforce.ibmcloud.com/vulnerabilities/49714(cve@mitre.org)

https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00210.html(cve@mitre.org)

https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00215.html(cve@mitre.org)

http://bugs.xine-project.org/show_bug.cgi?id=224(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html(af854a3a-2127-422b-91ae-364da2661108)

http://osvdb.org/53288(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/34593(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/34712(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/35416(af854a3a-2127-422b-91ae-364da2661108)

http://sourceforge.net/project/shownotes.php?group_id=9655&release_id=673233(af854a3a-2127-422b-91ae-364da2661108)

http://www.mandriva.com/security/advisories?name=MDVSA-2009:298(af854a3a-2127-422b-91ae-364da2661108)

http://www.mandriva.com/security/advisories?name=MDVSA-2009:299(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/archive/1/502481/100/0/threaded(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/34384(af854a3a-2127-422b-91ae-364da2661108)

http://www.securitytracker.com/id?1021989(af854a3a-2127-422b-91ae-364da2661108)

http://www.trapkit.de/advisories/TKADV2009-005.txt(af854a3a-2127-422b-91ae-364da2661108)

http://www.vupen.com/english/advisories/2009/0937(af854a3a-2127-422b-91ae-364da2661108)

https://exchange.xforce.ibmcloud.com/vulnerabilities/49714(af854a3a-2127-422b-91ae-364da2661108)

https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00210.html(af854a3a-2127-422b-91ae-364da2661108)

https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00215.html(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.