CVE-2008-0073

MÉDIO 6.8CVE-2008-0073 · Published 24/03/2008 · updated 16/06/2026

Em resumo

CVE-2008-0073 é uma vulnerabilidade MÉDIO (CVSS 6.8) que afeta xine-lib (xine).
Chance de exploração nos próximos 30 dias (EPSS): 9.3%, maior que 95.4% das vulnerabilidades.
Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.

Package	Affected versions	Patched versions
xine-lib xine	`= 1.1.10.1`	No fix yet

Description

Array index error in the sdpplin_parse function in input/libreal/sdpplin.c in xine-lib 1.1.10.1 allows remote RTSP servers to execute arbitrary code via a large streamid SDP parameter.

References

lists.opensuse.org/opensuse-security-announce/2008-03/msg00008.html
lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html
secunia.com/advisories/28694 · Vendor Advisory
secunia.com/advisories/29392
secunia.com/advisories/29472
secunia.com/advisories/29503
secunia.com/advisories/29578
secunia.com/advisories/29601
secunia.com/advisories/29740
secunia.com/advisories/29766
secunia.com/advisories/29800
secunia.com/advisories/30581
secunia.com/advisories/31372
secunia.com/advisories/31393
secunia.com/secunia_research/2008-10 · Vendor Advisory
security.gentoo.org/glsa/glsa-200804-25.xml

Mais vulnerabilidades de xine-lib

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free