CVE-2008-5241

Published: Nov 26, 2008Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Integer underflow in demux_qt.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, allows remote attackers to cause a denial of service (crash) via a crafted media file that results in a small value of moov_atom_size in a compressed MOV (aka CMOV_ATOM).

Affected (49)

Products: Xine: Xine Lib

Xine

1 product

Xine Lib

Configuration A

49 vulnerable

Vulnerable Software	Affected Versions
Xine Xine Lib	Up to 1.1.15
Xine Xine Lib	Version 0.9.13
Xine Xine Lib	Version 1.0.1
Xine Xine Lib	Version 1.0.2
Xine Xine Lib	Version 1.0.3a
Xine Xine Lib	Version 1.0
Xine Xine Lib	Version 1.1.0
Xine Xine Lib	Version 1.1.10.1
Xine Xine Lib	Version 1.1.10
Xine Xine Lib	Version 1.1.11.1
Xine Xine Lib	Version 1.1.11
Xine Xine Lib	Version 1.1.12
Xine Xine Lib	Version 1.1.13
Xine Xine Lib	Version 1.1.14
Xine Xine Lib	Version 1.1.1
Xine Xine Lib	Version 1.1.2
Xine Xine Lib	Version 1.1.3
Xine Xine Lib	Version 1.1.4
Xine Xine Lib	Version 1.1.5
Xine Xine Lib	Version 1.1.6
Xine Xine Lib	Version 1.1.7
Xine Xine Lib	Version 1.1.8
Xine Xine Lib	Version 1.1.9.1
Xine Xine Lib	Version 1.1.9
Xine Xine Lib	Version 1 rc0a
Xine Xine Lib	Version 1 rc1
Xine Xine Lib	Version 1 rc2
Xine Xine Lib	Version 1 rc3
Xine Xine Lib	Version 1 rc3a
Xine Xine Lib	Version 1 rc3b
Xine Xine Lib	Version 1 rc3c
Xine Xine Lib	Version 1 rc4
Xine Xine Lib	Version 1 rc4a
Xine Xine Lib	Version 1 rc5
Xine Xine Lib	Version 1 rc6a
Xine Xine Lib	Version 1 rc7
Xine Xine Lib	Version 1 rc8
Xine Xine Lib	Version 1_beta10
Xine Xine Lib	Version 1_beta11
Xine Xine Lib	Version 1_beta12
Xine Xine Lib	Version 1_beta1
Xine Xine Lib	Version 1_beta2
Xine Xine Lib	Version 1_beta3
Xine Xine Lib	Version 1_beta4
Xine Xine Lib	Version 1_beta5
Xine Xine Lib	Version 1_beta6
Xine Xine Lib	Version 1_beta7
Xine Xine Lib	Version 1_beta8
Xine Xine Lib	Version 1_beta9