QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2008-5233

Back to search

CVE-2008-5233

Published: Nov 26, 2008

Modified: Aug 7, 2024

PUBLISHED

Description

xine-lib 1.1.12, and other versions before 1.1.15, does not check for failure of malloc in circumstances including (1) the mymng_process_header function in demux_mng.c, (2) the open_mod_file function in demux_mod.c, and (3) frame_buffer allocation in the real_parse_audio_specific_data function in demux_real.c, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted media file.

VendorProductVersions

n/a

n/a

affected
n/a

References

30797
vdb-entry
x_refsource_BID
1020703
vdb-entry
x_refsource_SECTRACK
47747
vdb-entry
x_refsource_OSVDB
4648
third-party-advisory
x_refsource_SREASON
31827
third-party-advisory
x_refsource_SECUNIA
FEDORA-2008-7572
vendor-advisory
x_refsource_FEDORA
SUSE-SR:2009:004
vendor-advisory
x_refsource_SUSE
xinelib-openmodfile-bo(44649)
vdb-entry
x_refsource_XF
MDVSA-2009:020
vendor-advisory
x_refsource_MANDRIVA
FEDORA-2008-7512
vendor-advisory
x_refsource_FEDORA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now