CVE-2008-1161

N/A

Descricao

Buffer overflow in the Matroska demuxer (demuxers/demux_matroska.c) in xine-lib before 1.1.10.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Matroska file with invalid frame sizes.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado3/10/2008

Ultima modificacao4/23/2026

Fontenvd

Avistamentos honeypot0

Produtos afetados

matroska:demuxer

Fraquezas (CWE)

CWE-119

Referencias

http://hg.debian.org/hg/xine-lib/xine-lib?cmd=changeset%3Bnode=a62d6f482a69%3Bstyle=gitweb(cve@mitre.org)

http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html(cve@mitre.org)

http://secunia.com/advisories/29323(cve@mitre.org)

http://secunia.com/advisories/29601(cve@mitre.org)

http://secunia.com/advisories/31393(cve@mitre.org)

http://www.debian.org/security/2008/dsa-1536(cve@mitre.org)

http://www.mandriva.com/security/advisories?name=MDVSA-2008:178(cve@mitre.org)

http://www.securityfocus.com/bid/28543(cve@mitre.org)

http://www.ubuntu.com/usn/usn-635-1(cve@mitre.org)

https://exchange.xforce.ibmcloud.com/vulnerabilities/41172(cve@mitre.org)

http://hg.debian.org/hg/xine-lib/xine-lib?cmd=changeset%3Bnode=a62d6f482a69%3Bstyle=gitweb(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/29323(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/29601(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/31393(af854a3a-2127-422b-91ae-364da2661108)

http://www.debian.org/security/2008/dsa-1536(af854a3a-2127-422b-91ae-364da2661108)

http://www.mandriva.com/security/advisories?name=MDVSA-2008:178(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/28543(af854a3a-2127-422b-91ae-364da2661108)

http://www.ubuntu.com/usn/usn-635-1(af854a3a-2127-422b-91ae-364da2661108)

https://exchange.xforce.ibmcloud.com/vulnerabilities/41172(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.