← Back

CVE-2008-5235

nvd nist
Published: Nov 26, 2008Modified: Apr 23, 2026

JSON object

Loading...
9.3
Vector
AV:N/AC:M/Au:N/C:C/I:C/A:C
Exploitability: 8.6 / Impact: 10.0
Source: NVD

Description

Heap-based buffer overflow in the demux_real_send_chunk function in src/demuxers/demux_real.c in xine-lib before 1.1.15 allows remote attackers to execute arbitrary code via a crafted Real Media file. NOTE: some of these details are obtained from third party information.

Affected (38)

Products: Xine: Xine
1 product
Xine
Configuration A
38 vulnerable
Vulnerable SoftwareAffected Versions
Xine
version ≤ 1.1.4
Version 0.9.13
Version 1.0.1
Version 1.0.2
Version 1.0.3a
Version 1.0
Version 1.1.0
Version 1.1.10.1
Version 1.1.11.1
Version 1.1.11
Version 1.1.1
Version 1.1.2
Version 1.1.3
Version 1 beta10
Version 1 beta11
Version 1 beta12
Version 1 beta1
Version 1 beta2
Version 1 beta3
Version 1 beta4
Version 1 beta5
Version 1 beta6
Version 1 beta7
Version 1 beta8
Version 1 beta9
Version 1 rc0a
Version 1 rc1
Version 1 rc2
Version 1 rc3
Version 1 rc3a
Version 1 rc3b
Version 1 rc3c
Version 1 rc4
Version 1 rc4a
Version 1 rc5
Version 1 rc6a
Version 1 rc7
Version 1 rc8

References (12)

Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.