| Package | Affected versions | Patched versions |
|---|---|---|
| xine | = 0.9.18= 1_rc2= 1_rc3= 1_rc4= 1_rc5 | |
| xine-lib | = 0.99= 1_rc2= 1_rc3= 1_rc4= 1_rc5 |
Stack-based buffer overflow in the VideoCD (VCD) code in xine-lib 1-rc2 through 1-rc5, as derived from libcdio, allows attackers to execute arbitrary code via a VideoCD with an unterminated disk label.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free