PT-2008-3409 · Xine · Xine-Lib
Guido Landi
·
Publicado
2008-04-17
·
Atualizado
2024-08-07
·
CVE-2008-1878
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
xine-lib versions 1.1.12 and earlier
Description
The issue is a stack-based buffer overflow in the demux nsf send chunk function, located in src/demuxers/demux nsf.c. This allows remote attackers to cause a denial of service, potentially leading to a crash, and may also enable the execution of arbitrary code if a long NSF title is sent.
Recommendations
For xine-lib versions 1.1.12 and earlier, as a temporary workaround, consider disabling the demux nsf send chunk function until a patch is available. Restrict access to the demux nsf.c module to minimize the risk of exploitation. Avoid using long NSF titles in the affected function until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Xine-Lib