CVE-2008-5246

Published: 26 November 2008

Multiple heap-based buffer overflows in xine-lib before 1.1.15 allow remote attackers to execute arbitrary code via vectors that send ID3 data to the (1) id3v22_interp_frame and (2) id3v24_interp_frame functions in src/demuxers/id3.c. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Status

Notes

this appears to be the same bug as the (2) part of CVE-2008-5234

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5246
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=498243
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507184
• https://ubuntu.com/security/notices/USN-710-1
• NVD
• Launchpad
• Debian