Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2008-5235

Опубликовано: 26 нояб. 2008
Источник: nvd
CVSS2: 9.3
EPSS Низкий

Описание

Heap-based buffer overflow in the demux_real_send_chunk function in src/demuxers/demux_real.c in xine-lib before 1.1.15 allows remote attackers to execute arbitrary code via a crafted Real Media file. NOTE: some of these details are obtained from third party information.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:xine:xine:*:*:*:*:*:*:*:*
Версия до 1.1.4 (включая)
cpe:2.3:a:xine:xine:0.9.13:*:*:*:*:*:*:*
cpe:2.3:a:xine:xine:1:beta1:*:*:*:*:*:*
cpe:2.3:a:xine:xine:1:beta10:*:*:*:*:*:*
cpe:2.3:a:xine:xine:1:beta11:*:*:*:*:*:*
cpe:2.3:a:xine:xine:1:beta12:*:*:*:*:*:*
cpe:2.3:a:xine:xine:1:beta2:*:*:*:*:*:*
cpe:2.3:a:xine:xine:1:beta3:*:*:*:*:*:*
cpe:2.3:a:xine:xine:1:beta4:*:*:*:*:*:*
cpe:2.3:a:xine:xine:1:beta5:*:*:*:*:*:*
cpe:2.3:a:xine:xine:1:beta6:*:*:*:*:*:*
cpe:2.3:a:xine:xine:1:beta7:*:*:*:*:*:*
cpe:2.3:a:xine:xine:1:beta8:*:*:*:*:*:*
cpe:2.3:a:xine:xine:1:beta9:*:*:*:*:*:*
cpe:2.3:a:xine:xine:1:rc0a:*:*:*:*:*:*
cpe:2.3:a:xine:xine:1:rc1:*:*:*:*:*:*
cpe:2.3:a:xine:xine:1:rc2:*:*:*:*:*:*
cpe:2.3:a:xine:xine:1:rc3:*:*:*:*:*:*
cpe:2.3:a:xine:xine:1:rc3a:*:*:*:*:*:*
cpe:2.3:a:xine:xine:1:rc3b:*:*:*:*:*:*
cpe:2.3:a:xine:xine:1:rc3c:*:*:*:*:*:*
cpe:2.3:a:xine:xine:1:rc4:*:*:*:*:*:*
cpe:2.3:a:xine:xine:1:rc4a:*:*:*:*:*:*
cpe:2.3:a:xine:xine:1:rc5:*:*:*:*:*:*
cpe:2.3:a:xine:xine:1:rc6a:*:*:*:*:*:*
cpe:2.3:a:xine:xine:1:rc7:*:*:*:*:*:*
cpe:2.3:a:xine:xine:1:rc8:*:*:*:*:*:*
cpe:2.3:a:xine:xine:1.0:*:*:*:*:*:*:*
cpe:2.3:a:xine:xine:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:xine:xine:1.0.2:*:*:*:*:*:*:*
cpe:2.3:a:xine:xine:1.0.3a:*:*:*:*:*:*:*
cpe:2.3:a:xine:xine:1.1.0:*:*:*:*:*:*:*
cpe:2.3:a:xine:xine:1.1.1:*:*:*:*:*:*:*
cpe:2.3:a:xine:xine:1.1.2:*:*:*:*:*:*:*
cpe:2.3:a:xine:xine:1.1.3:*:*:*:*:*:*:*
cpe:2.3:a:xine:xine:1.1.10.1:*:*:*:*:*:*:*
cpe:2.3:a:xine:xine:1.1.11:*:*:*:*:*:*:*
cpe:2.3:a:xine:xine:1.1.11.1:*:*:*:*:*:*:*

EPSS

Процентиль: 87%
0.03478
Низкий

9.3 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

ubuntu
около 17 лет назад

Heap-based buffer overflow in the demux_real_send_chunk function in src/demuxers/demux_real.c in xine-lib before 1.1.15 allows remote attackers to execute arbitrary code via a crafted Real Media file. NOTE: some of these details are obtained from third party information.

redhat
больше 17 лет назад

Heap-based buffer overflow in the demux_real_send_chunk function in src/demuxers/demux_real.c in xine-lib before 1.1.15 allows remote attackers to execute arbitrary code via a crafted Real Media file. NOTE: some of these details are obtained from third party information.

debian
около 17 лет назад

Heap-based buffer overflow in the demux_real_send_chunk function in sr ...

github
больше 3 лет назад

Heap-based buffer overflow in the demux_real_send_chunk function in src/demuxers/demux_real.c in xine-lib before 1.1.15 allows remote attackers to execute arbitrary code via a crafted Real Media file. NOTE: some of these details are obtained from third party information.

EPSS

Процентиль: 87%
0.03478
Низкий

9.3 Critical

CVSS2

Дефекты

CWE-119