XI
Product
Xine
14
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Xine to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2008-5238 | – | Nov 26 | Integer overflow in the real_parse_mdpr function in demux_real.c in xine-lib 1.1.12, and other versions before 1.1.15, allows remote attackers to cause a denial of service (crash)… Affected: through 1.1.14; 0.9.13; 1; 1; 1; 1; +33 more |
| CVE-2008-5237 | – | Nov 26 | Multiple integer overflows in xine-lib 1.1.12, and other 1.1.15 and earlier versions, allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary… Affected: through 1.1.5; 0.9.13; 1; 1; 1; 1; +33 more |
| CVE-2008-5236 | – | Nov 26 | Multiple heap-based buffer overflows in xine-lib 1.1.12, and other 1.1.15 and earlier versions, allow remote attackers to execute arbitrary code via vectors related to (1) a… Affected: through 1.1.5; 0.9.13; 1; 1; 1; 1; +33 more |
| CVE-2008-5235 | – | Nov 26 | Heap-based buffer overflow in the demux_real_send_chunk function in src/demuxers/demux_real.c in xine-lib before 1.1.15 allows remote attackers to execute arbitrary code via a… Affected: through 1.1.4; 0.9.13; 1; 1; 1; 1; +32 more |
| CVE-2007-0255 | – | Jan 16 | XINE 0.99.4 allows user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a certain M3U file that contains a long… Affected: 0.99.4 |
| CVE-2006-2230 | – | May 5 | Multiple format string vulnerabilities in xiTK (xitk/main.c) in xine 0.99.4 might allow attackers to cause a denial of service via format string specifiers in an MP3 filename… Affected: 0.99.4 |
| CVE-2006-1905 | – | Apr 20 | Multiple format string vulnerabilities in xiTK (xitk/main.c) in xine 0.99.3 allow remote attackers to execute arbitrary code via format string specifiers in a long filename on an… Affected: 0.9.8; 0.9.13; 0.9.18; 1.0; 1.0.1; 1_alpha; +25 more |
| CVE-2004-1187 | – | Jan 10 | Heap-based buffer overflow in the pnm_get_chunk function for xine 0.99.2, and other packages such as MPlayer that use the same code, allows remote attackers to execute arbitrary… Affected: 0.9.8; 0.9.13; 0.9.18; 1_alpha; 1_beta1; 1_beta2; +23 more |
| CVE-2004-1188 | – | Jan 10 | The pnm_get_chunk function in xine 0.99.2 and earlier, and other packages such as MPlayer that use the same code, does not properly verify that the chunk size is less than the… Affected: 0.9.8; 0.9.13; 0.9.18; 1_alpha; 1_beta1; 1_beta2; +23 more |
| CVE-2004-1951 | – | Dec 31 | xine 1.x alpha, 1.x beta, and 1.0rc through 1.0rc3a, and xine-ui 0.9.21 to 0.9.23 allows remote attackers to overwrite arbitrary files via the (1) audio.sun_audio_device or (2)… Affected: 0.9.8; 0.9.13; 1_beta1; 1_beta2; 1_beta3; 1_beta4; +14 more |
| CVE-2004-1476 | – | Dec 31 | Stack-based buffer overflow in the VideoCD (VCD) code in xine-lib 1-rc2 through 1-rc5, as derived from libcdio, allows attackers to execute arbitrary code via a VideoCD with an… Affected: 0.9.18; 1_rc2; 1_rc3; 1_rc4; 1_rc5 |
| CVE-2004-1475 | – | Dec 31 | Multiple stack-based buffer overflows in xine-lib 1-rc2 through 1-rc5 allow attackers to execute arbitrary code via (1) long VideoCD vcd:// MRLs or (2) long subtitle lines Affected: 0.9.18; 1_rc2; 1_rc3; 1_rc4; 1_rc5 |
| CVE-2004-1379 | – | Sep 16 | Heap-based buffer overflow in the DVD subpicture decoder in xine xine-lib 1-rc5 and earlier allows remote attackers to execute arbitrary code via a (1) DVD or (2) MPEG subpicture… Affected: 1_alpha; 1_beta1; 1_beta2; 1_beta3; 1_beta4; 1_beta5; +16 more |
| CVE-2004-0372 | – | Apr 15 | xine allows local users to overwrite arbitrary files via a symlink attack on a bug report email that is generated by the (1) xine-bugreport or (2) xine-check scripts Affected: 0.9.13; 1_beta1; 1_beta2; 1_beta3; 1_beta4; 1_beta5; +13 more |
Showing 14