CVE-2008-5235
Published: 26 November 2008
Heap-based buffer overflow in the demux_real_send_chunk function in src/demuxers/demux_real.c in xine-lib before 1.1.15 allows remote attackers to execute arbitrary code via a crafted Real Media file. NOTE: some of these details are obtained from third party information.
Notes
| Author | Note |
|---|---|
| mdeslaur | this looks like 1C |
Priority
Status
| Package | Release | Status |
|---|---|---|
|
xine-lib Launchpad, Ubuntu, Debian |
dapper |
Not vulnerable
(code not present)
|
| gutsy |
Not vulnerable
(code not present)
|
|
| hardy |
Not vulnerable
(code not present)
|
|
| intrepid |
Not vulnerable
(1.1.15-0ubuntu1)
|
|
| upstream |
Released
(1.1.15)
|
|
|
Patches: upstream: http://hg.debian.org/hg/xine-lib/xine-lib?cmd=changeset;node=1f961a5d8a7f3cc985109b1cb5faba59bd4d22cc;style=gitweb |
||