xine-lib

2008-03-09

Page content

Author: vmiklos
Vulnerable: 1.1.8-1
Unaffected: 1.1.10.1-1sayshell1

A vulnerability has been discovered in xine-lib, which can potentially be exploited by malicious people to compromise a user’s system. The vulnerability is caused due to a boundary error within the “open_flac_file()” function in src/demuxers/demux_flac.c. This can be exploited to corrupt memory via a specially crafted FLAC file.

Bug Tracker URL: http://bugs.frugalware.org/task/2773

CVEs:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0486