PT-2008-6390 · Xine · Xine-Lib

Publicado 2008-11-26 · Atualizado 2009-11-24 · CVE-2008-5248

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions xine-lib versions prior to 1.1.15

Description The issue allows remote attackers to cause a denial of service, resulting in a crash, by using MP3 files with metadata consisting only of separators.

Recommendations For versions prior to 1.1.15, update to version 1.1.15 or later to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2008-5248

Produtos afetados

Xine-Lib

Referências · 5

• http://mandriva.com/security/advisories?name=MDVSA-2009:298 · Aviso do Fabricante
• http://sourceforge.net/project/shownotes.php?release_id=619869 · Nota
• http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html · Aviso do Fabricante
• http://securityfocus.com/bid/32505 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-5248 · Nota de Segurança