← Back

CVE-2008-5243

nvd nist
Published: Nov 26, 2008Modified: Apr 23, 2026

JSON object

Loading...
4.3
Vector
AV:N/AC:M/Au:N/C:N/I:N/A:P
Exploitability: 8.6 / Impact: 2.9
Source: NVD

Description

The real_parse_headers function in demux_real.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, relies on an untrusted input length value to "reindex into an allocated buffer," which allows remote attackers to cause a denial of service (crash) via a crafted value, probably an array index error.

Affected (49)

Products: Xine: Xine Lib
Xine
1 product
Xine Lib
Configuration A
49 vulnerable
Vulnerable SoftwareAffected Versions
Xine
Xine Lib
Up to 1.1.15
Xine Lib
Version 0.9.13
Xine Lib
Version 1.0.1
Xine Lib
Version 1.0.2
Xine Lib
Version 1.0.3a
Xine Lib
Version 1.0
Xine Lib
Version 1.1.0
Xine Lib
Version 1.1.10.1
Xine Lib
Version 1.1.10
Xine Lib
Version 1.1.11.1
Xine Lib
Version 1.1.11
Xine Lib
Version 1.1.12
Xine Lib
Version 1.1.13
Xine Lib
Version 1.1.14
Xine Lib
Version 1.1.1
Xine Lib
Version 1.1.2
Xine Lib
Version 1.1.3
Xine Lib
Version 1.1.4
Xine Lib
Version 1.1.5
Xine Lib
Version 1.1.6
Xine Lib
Version 1.1.7
Xine Lib
Version 1.1.8
Xine Lib
Version 1.1.9.1
Xine Lib
Version 1.1.9
Xine Lib
Version 1 rc0a
Xine Lib
Version 1 rc1
Xine Lib
Version 1 rc2
Xine Lib
Version 1 rc3
Xine Lib
Version 1 rc3a
Xine Lib
Version 1 rc3b
Xine Lib
Version 1 rc3c
Xine Lib
Version 1 rc4
Xine Lib
Version 1 rc4a
Xine Lib
Version 1 rc5
Xine Lib
Version 1 rc6a
Xine Lib
Version 1 rc7
Xine Lib
Version 1 rc8
Xine Lib
Version 1_beta10
Xine Lib
Version 1_beta11
Xine Lib
Version 1_beta12
Xine Lib
Version 1_beta1
Xine Lib
Version 1_beta2
Xine Lib
Version 1_beta3
Xine Lib
Version 1_beta4
Xine Lib
Version 1_beta5
Xine Lib
Version 1_beta6
Xine Lib
Version 1_beta7
Xine Lib
Version 1_beta8
Xine Lib
Version 1_beta9

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (24)

Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.