Revision Date: | 2021-08-15 | Version: | 1 |
Title: | CVE-2008-5243 |
Description: |
The real_parse_headers function in demux_real.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, relies on an untrusted input length value to "reindex into an allocated buffer," which allows remote attackers to cause a denial of service (crash) via a crafted value, probably an array index error.
|
Family: | unix | Class: | vulnerability |
Status: | | Reference(s): | CVE-2008-5243 Mitre CVE-2008-5243 SUSE CVE-2008-5243 SUSE-SR:2009:004 SUSE-SR:2009:004
|
Platform(s): | Novell Linux Desktop 9 for x86 Novell Linux Desktop 9 for x86_64 Novell Linux Desktop 9 SDK for x86 Novell Linux Desktop 9 SDK for x86_64 openSUSE 10.3 openSUSE 11.0 SLES SDK 9 for IBM iSeries and IBM pSeries SLES SDK 9 for IBM S/390 and IBM zSeries SLES SDK 9 for IBM zSeries SLES SDK 9 for IPF SLES SDK 9 for x86 SLES SDK 9 for X86-64 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise SDK 10 SP2 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4
| Product(s): | |
Definition Synopsis |
sles10-sp2-sdk is installed AND Package Information
xine-devel less than 1.1.1-24.43
OR xine-extra less than 1.1.1-24.43
OR xine-lib-32bit less than 1.1.1-24.43
OR xine-lib-64bit less than 1.1.1-24.43
OR xine-lib-x86 less than 1.1.1-24.43
OR xine-lib less than 1.1.1-24.43
OR xine-ui less than 0.99.4-32.39
|
Definition Synopsis |
SUSE Linux Enterprise Software Development Kit 11 SP4 is installed
AND Package Information
libxine-devel-1.1.15-23.3 is installed
OR libxine1-1.1.15-23.3 is installed
OR libxine1-32bit-1.1.15-23.3 is installed
OR libxine1-gnome-vfs-1.1.15-23.3 is installed
OR libxine1-pulse-1.1.15-23.3 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Software Development Kit 11 SP4 is installed
AND Package Information
libxine-devel-1.1.15-23.3.9 is installed
OR libxine1-1.1.15-23.3.9 is installed
OR libxine1-32bit-1.1.15-23.3.9 is installed
OR libxine1-gnome-vfs-1.1.15-23.3.9 is installed
OR libxine1-pulse-1.1.15-23.3.9 is installed
|