CVE-2008-5242

Published: Nov 26, 2008Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

demux_qt.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, does not validate the count field before calling calloc for STSD_ATOM atom allocation, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted media file.

Affected (49)

Products: Xine: Xine Lib

Xine

1 product

Xine Lib

Configuration A

49 vulnerable

Vulnerable Software	Affected Versions
Xine Xine Lib	Up to 1.1.15
Xine Xine Lib	Version 0.9.13
Xine Xine Lib	Version 1.0.1
Xine Xine Lib	Version 1.0.2
Xine Xine Lib	Version 1.0.3a
Xine Xine Lib	Version 1.0
Xine Xine Lib	Version 1.1.0
Xine Xine Lib	Version 1.1.10.1
Xine Xine Lib	Version 1.1.10
Xine Xine Lib	Version 1.1.11.1
Xine Xine Lib	Version 1.1.11
Xine Xine Lib	Version 1.1.12
Xine Xine Lib	Version 1.1.13
Xine Xine Lib	Version 1.1.14
Xine Xine Lib	Version 1.1.1
Xine Xine Lib	Version 1.1.2
Xine Xine Lib	Version 1.1.3
Xine Xine Lib	Version 1.1.4
Xine Xine Lib	Version 1.1.5
Xine Xine Lib	Version 1.1.6
Xine Xine Lib	Version 1.1.7
Xine Xine Lib	Version 1.1.8
Xine Xine Lib	Version 1.1.9.1
Xine Xine Lib	Version 1.1.9
Xine Xine Lib	Version 1 rc0a
Xine Xine Lib	Version 1 rc1
Xine Xine Lib	Version 1 rc2
Xine Xine Lib	Version 1 rc3
Xine Xine Lib	Version 1 rc3a
Xine Xine Lib	Version 1 rc3b
Xine Xine Lib	Version 1 rc3c
Xine Xine Lib	Version 1 rc4
Xine Xine Lib	Version 1 rc4a
Xine Xine Lib	Version 1 rc5
Xine Xine Lib	Version 1 rc6a
Xine Xine Lib	Version 1 rc7
Xine Xine Lib	Version 1 rc8
Xine Xine Lib	Version 1_beta10
Xine Xine Lib	Version 1_beta11
Xine Xine Lib	Version 1_beta12
Xine Xine Lib	Version 1_beta1
Xine Xine Lib	Version 1_beta2
Xine Xine Lib	Version 1_beta3
Xine Xine Lib	Version 1_beta4
Xine Xine Lib	Version 1_beta5
Xine Xine Lib	Version 1_beta6
Xine Xine Lib	Version 1_beta7
Xine Xine Lib	Version 1_beta8
Xine Xine Lib	Version 1_beta9