CVE-2008-0225

概要

参考情報

• aluigi.altervista.org/adv/xinermffhof-adv.txt · Exploit
• bugs.gentoo.org/show_bug.cgi
• secunia.com/advisories/28384 · Vendor Advisory
• secunia.com/advisories/28489 · Vendor Advisory
• secunia.com/advisories/28507 · Vendor Advisory
• secunia.com/advisories/28636 · Vendor Advisory
• secunia.com/advisories/28674 · Vendor Advisory
• secunia.com/advisories/28955 · Vendor Advisory
• secunia.com/advisories/31393 · Vendor Advisory
• security.gentoo.org/glsa/glsa-200801-12.xml
• sourceforge.net/project/shownotes.php
• debian.org/security/2008/dsa-1472
• mandriva.com/security/advisories
• mandriva.com/security/advisories

xine-lib のその他の脆弱性

• CVE-2009-1274中 5.0Integer overflow in the qt_error parse_trak_atom function in demuxers/demux_qt.c in xine-lib 1.1.16.2 and earlier allows remote attackers to…
• CVE-2009-0698高 7.5Integer overflow in the 4xm demuxer (demuxers/demux_4xm.c) in xine-lib 1.1.16.1 allows remote attackers to cause a denial of service (crash)…
• CVE-2008-5248中 4.3xine-lib before 1.1.15 allows remote attackers to cause a denial of service (crash) via "MP3 files with metadata consisting only of separato…
• CVE-2008-5247中 4.3The real_parse_audio_specific_data function in demux_real.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, uses an untrusted hei…
• CVE-2008-5246緊急 9.3Multiple heap-based buffer overflows in xine-lib before 1.1.15 allow remote attackers to execute arbitrary code via vectors that send ID3 da…