CVE-2008-1878

Published: Apr 17, 2008Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Stack-based buffer overflow in the demux_nsf_send_chunk function in src/demuxers/demux_nsf.c in xine-lib 1.1.12 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long NSF title.

Affected (8)

Products: Xine: Xine Lib

1 product

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Xine Xine Lib	Up to 1.1.12
Xine Xine Lib	Version 1.1.0
Xine Xine Lib	Version 1.1.10.1
Xine Xine Lib	Version 1.1.10
Xine Xine Lib	Version 1.1.11.1
Xine Xine Lib	Version 1.1.11
Xine Xine Lib	Version 1.1.1
Xine Xine Lib	Version 1.1.9

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (36)

http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html

Source: cve@mitre.org

http://secunia.com/advisories/29850

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/30021

Source: cve@mitre.org

http://secunia.com/advisories/30337

Source: cve@mitre.org

http://secunia.com/advisories/30581

Source: cve@mitre.org

http://secunia.com/advisories/31372

Source: cve@mitre.org

http://secunia.com/advisories/31393

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200808-01.xml

Source: cve@mitre.org

http://www.debian.org/security/2008/dsa-1586

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2008:177

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2008:178

Source: cve@mitre.org

http://www.securityfocus.com/bid/28816

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-635-1

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/1247/references

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/41865

Source: cve@mitre.org

https://www.exploit-db.com/exploits/5458

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00536.html

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00571.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/29850

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/30021

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/30337

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/30581

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/31372

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/31393

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-200808-01.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2008/dsa-1586

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2008:177

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2008:178

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/28816

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-635-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/1247/references

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/41865

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.exploit-db.com/exploits/5458

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00536.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00571.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.