XI
Product
Xine-lib
38
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Xine-lib to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2009-1274 | – | Apr 8 | Integer overflow in the qt_error parse_trak_atom function in demuxers/demux_qt.c in xine-lib 1.1.16.2 and earlier allows remote attackers to execute arbitrary code via a Quicktime… Affected: 1.1.0; 1.1.1; 1.1.10; 1.1.10.1; 1.1.11; 1.1.11.1; +6 more |
| CVE-2009-0698 | – | Feb 23 | Integer overflow in the 4xm demuxer (demuxers/demux_4xm.c) in xine-lib 1.1.16.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code… Affected: 1.1.16.1 |
| CVE-2008-5248 | – | Nov 26 | xine-lib before 1.1.15 allows remote attackers to cause a denial of service (crash) via "MP3 files with metadata consisting only of separators." Affected: through 1.1.15; 0.9.13; 1; 1; 1; 1; +34 more |
| CVE-2008-5247 | – | Nov 26 | The real_parse_audio_specific_data function in demux_real.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, uses an untrusted height (aka codec_data_length) value as a… Affected: through 1.1.15; 0.9.13; 1; 1; 1; 1; +34 more |
| CVE-2008-5246 | – | Nov 26 | Multiple heap-based buffer overflows in xine-lib before 1.1.15 allow remote attackers to execute arbitrary code via vectors that send ID3 data to the (1) id3v22_interp_frame and… Affected: through 1.1.14; 0.9.13; 1; 1; 1; 1; +34 more |
| CVE-2008-5245 | – | Nov 26 | xine-lib before 1.1.15 performs V4L video frame preallocation before ascertaining the required length, which has unknown impact and attack vectors, possibly related to a buffer… Affected: through 1.1.14; 0.9.13; 1; 1; 1; 1; +34 more |
| CVE-2008-5244 | – | Nov 26 | Unspecified vulnerability in xine-lib before 1.1.15 has unknown impact and attack vectors related to libfaad Affected: through 1.1.15; 0.9.13; 1; 1; 1; 1; +34 more |
| CVE-2008-5243 | – | Nov 26 | The real_parse_headers function in demux_real.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, relies on an untrusted input length value to "reindex into an allocated… Affected: through 1.1.15; 0.9.13; 1; 1; 1; 1; +34 more |
| CVE-2008-5242 | – | Nov 26 | demux_qt.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, does not validate the count field before calling calloc for STSD_ATOM atom allocation, which allows remote… Affected: through 1.1.15; 0.9.13; 1; 1; 1; 1; +34 more |
| CVE-2008-5241 | – | Nov 26 | Integer underflow in demux_qt.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, allows remote attackers to cause a denial of service (crash) via a crafted media file… Affected: through 1.1.15; 0.9.13; 1; 1; 1; 1; +34 more |
| CVE-2008-5240 | – | Nov 26 | xine-lib 1.1.12, and other 1.1.15 and earlier versions, relies on an untrusted input value to determine the memory allocation and does not check the result for (1) the… Affected: through 1.1.15; 0.9.13; 1; 1; 1; 1; +34 more |
| CVE-2008-5239 | – | Nov 26 | xine-lib 1.1.12, and other 1.1.15 and earlier versions, does not properly handle (a) negative and (b) zero values during unspecified read function calls in input_file.c,… Affected: 0.9.13; 1; 1; 1; 1; 1; +34 more |
| CVE-2008-5234 | – | Nov 26 | Multiple heap-based buffer overflows in xine-lib 1.1.12, and other versions before 1.1.15, allow remote attackers to execute arbitrary code via vectors related to (1) a crafted… Affected: through 1.1.14; 0.9.13; 1; 1; 1; 1; +34 more |
| CVE-2008-5233 | – | Nov 26 | xine-lib 1.1.12, and other versions before 1.1.15, does not check for failure of malloc in circumstances including (1) the mymng_process_header function in demux_mng.c, (2) the… Affected: through 1.1.14; 0.9.13; 1; 1; 1; 1; +34 more |
| CVE-2008-3231 | – | Jul 18 | xine-lib before 1.1.15 allows remote attackers to cause a denial of service (crash) via a crafted OGG file, as demonstrated by playing lol-ffplay.ogg with xine Affected: through 1.1.14; 0.9.8; 0.9.13; 0.99; 1; 1; +32 more |
| CVE-2008-1878 | – | Apr 17 | Stack-based buffer overflow in the demux_nsf_send_chunk function in src/demuxers/demux_nsf.c in xine-lib 1.1.12 and earlier allows remote attackers to cause a denial of service… Affected: through 1.1.12; 1.1.0; 1.1.1; 1.1.9; 1.1.10; 1.1.10.1; +2 more |
| CVE-2008-1686 | – | Apr 8 | Array index vulnerability in Speex 1.1.12 and earlier, as used in libfishsound 0.9.0 and earlier, including Illiminable DirectShow Filters and Annodex Plugins for Firefox,… Affected: through 1.1.11.1; 0.9.8; 0.9.13; 0.99; 1.0; 1.0.1; +7 more |
| CVE-2008-0073 | – | Mar 24 | Array index error in the sdpplin_parse function in input/libreal/sdpplin.c in xine-lib 1.1.10.1 allows remote RTSP servers to execute arbitrary code via a large streamid SDP… Affected: 1.1.10.1 |
| CVE-2008-1482 | – | Mar 24 | Multiple integer overflows in xine-lib 1.1.11 and earlier allow remote attackers to trigger heap-based buffer overflows and possibly execute arbitrary code via (1) a crafted .FLV… Affected: 1.1.11 |
| CVE-2008-1110 | – | Feb 29 | Buffer overflow in demuxers/demux_asf.c (aka the ASF demuxer) in the xineplug_dmx_asf.so plugin in xine-lib before 1.1.10 allows remote attackers to execute arbitrary code or… Affected: through 1.1.9 |
| CVE-2008-0486 | – | Feb 5 | Array index vulnerability in libmpdemux/demux_audio.c in MPlayer 1.0rc2 and SVN before r25917, and possibly earlier versions, as used in Xine-lib 1.1.10, might allow remote… Affected: 1.1.10 |
| CVE-2008-0238 | – | Jan 11 | Multiple heap-based buffer overflows in the rmff_dump_cont function in input/libreal/rmff.c in xine-lib 1.1.9 allow remote attackers to execute arbitrary code via the SDP (1)… Affected: through 1.1.9 |
| CVE-2008-0225 | – | Jan 10 | Heap-based buffer overflow in the rmff_dump_cont function in input/libreal/rmff.c in xine-lib 1.1.9 and earlier allows remote attackers to execute arbitrary code via the SDP… Affected: through 1.1.9 |
| CVE-2006-4799 | – | Sep 14 | Buffer overflow in ffmpeg for xine-lib before 1.1.2 might allow context-dependent attackers to execute arbitrary code via a crafted AVI file and "bad indexes", a different… Affected: through 1.1.1; 1.0.1; 1.0.2; 1.1.0 |
| CVE-2006-2200 | – | Jun 28 | Stack-based buffer overflow in libmms, as used by (a) MiMMS 0.0.9 and (b) xine-lib 1.1.0 and earlier, allows remote attackers to cause a denial of service (application crash) and… Affected: 1.1.0 |
| CVE-2006-2802 | – | Jun 3 | Buffer overflow in the HTTP Plugin (xineplug_inp_http.so) for xine-lib 1.1.1 allows remote attackers to cause a denial of service (application crash) via a long reply from an HTTP… Affected: 1.0.1; 1.0.2; 1.1.0; 1.1.1 |
| CVE-2006-1664 | – | Apr 7 | Buffer overflow in xine_list_delete_current in libxine 1.14 and earlier, as distributed in xine-lib 1.1.1 and earlier, allows remote attackers to execute arbitrary code via a… Affected: 0.9.13; 1.0; 1.0.1; 1.0.2; 1.0.3a; 1.1.0; +1 more |
| CVE-2005-2967 | – | Oct 14 | Format string vulnerability in input_cdda.c in xine-lib 1-beta through 1-beta 3, 1-rc, 1.0 through 1.0.2, and 1.1.1 allows remote servers to execute arbitrary code via format… Affected: 0.9.13; 1.0; 1.0.1; 1.0.2; 1.1.0 |
| CVE-2005-1195 | – | May 2 | Multiple heap-based buffer overflows in the code used to handle (1) MMS over TCP (MMST) streams or (2) RealMedia RTSP streams in xine-lib before 1.0, and other products that use… Affected: 1_beta1; 1_beta2; 1_beta3; 1_beta4; 1_beta5; 1_beta6; +9 more |
| CVE-2004-1187 | – | Jan 10 | Heap-based buffer overflow in the pnm_get_chunk function for xine 0.99.2, and other packages such as MPlayer that use the same code, allows remote attackers to execute arbitrary… Affected: 0.9.8; 0.9.13; 0.99; 1_alpha; 1_beta1; 1_beta2; +22 more |
| CVE-2004-1300 | – | Jan 10 | Buffer overflow in the open_aiff_file function in demux_aiff.c for xine-lib (libxine) 1-rc7 allows remote attackers to execute arbitrary code via a crafted AIFF file Affected: 1_rc7 |
| CVE-2004-1188 | – | Jan 10 | The pnm_get_chunk function in xine 0.99.2 and earlier, and other packages such as MPlayer that use the same code, does not properly verify that the chunk size is less than the… Affected: 0.9.8; 0.9.13; 0.99; 1_alpha; 1_beta1; 1_beta2; +22 more |
| CVE-2004-1475 | – | Dec 31 | Multiple stack-based buffer overflows in xine-lib 1-rc2 through 1-rc5 allow attackers to execute arbitrary code via (1) long VideoCD vcd:// MRLs or (2) long subtitle lines Affected: 0.99; 1_rc2; 1_rc3; 1_rc4; 1_rc5 |
| CVE-2004-1951 | – | Dec 31 | xine 1.x alpha, 1.x beta, and 1.0rc through 1.0rc3a, and xine-ui 0.9.21 to 0.9.23 allows remote attackers to overwrite arbitrary files via the (1) audio.sun_audio_device or (2)… Affected: 1_rc2; 1_rc3a; 1_rc3b; 1_rc3c |
| CVE-2004-1476 | – | Dec 31 | Stack-based buffer overflow in the VideoCD (VCD) code in xine-lib 1-rc2 through 1-rc5, as derived from libcdio, allows attackers to execute arbitrary code via a VideoCD with an… Affected: 0.99; 1_rc2; 1_rc3; 1_rc4; 1_rc5 |
| CVE-2004-1455 | – | Dec 31 | Stack-based buffer overflow in Xine-lib-rc5 in xine-lib 1_rc5-r2 and earlier allows remote attackers to execute arbitrary code via crafted playlists that result in a long vcd://… Affected: 1_beta1; 1_beta2; 1_beta3; 1_beta4; 1_beta5; 1_beta6; +12 more |
| CVE-2004-1379 | – | Sep 16 | Heap-based buffer overflow in the DVD subpicture decoder in xine xine-lib 1-rc5 and earlier allows remote attackers to execute arbitrary code via a (1) DVD or (2) MPEG subpicture… Affected: 0.9.8; 1_beta2; 1_beta3; 1_beta4; 1_beta5; 1_beta6; +13 more |
| CVE-2004-0433 | – | Aug 18 | Multiple buffer overflows in the Real-Time Streaming Protocol (RTSP) client for (1) MPlayer before 1.0pre4 and (2) xine lib (xine-lib) before 1-rc4, when playing Real RTSP… Affected: 1_beta1; 1_beta2; 1_beta3; 1_beta4; 1_beta5; 1_beta6; +9 more |
Showing 38