xine-lib: integer overflow [LWN.net]

Package(s):

xine-lib

CVE #(s):

CVE-2009-0698

Created:

April 21, 2009

Updated:

June 1, 2010

Description:

From the CVE entry: Integer overflow in the 4xm demuxer (demuxers/demux_4xm.c) in xine-lib 1.1.16.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a 4X movie file with a large current_track value, a similar issue to CVE-2009-0385.

Alerts:

Gentoo	201006-04	2010-06-01
Mandriva	MDVSA-2009:319	2009-12-05
Mandriva	MDVSA-2009:298	2009-11-13
Mandriva	MDVSA-2009:299	2009-11-13
Ubuntu	USN-763-1	2009-04-20

(Log in to post comments)