CVE-2008-5246

Published: Nov 26, 2008Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Multiple heap-based buffer overflows in xine-lib before 1.1.15 allow remote attackers to execute arbitrary code via vectors that send ID3 data to the (1) id3v22_interp_frame and (2) id3v24_interp_frame functions in src/demuxers/id3.c. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected (48)

Products: Xine: Xine Lib

Xine

1 product

Xine Lib

Configuration A

48 vulnerable

Vulnerable Software	Affected Versions
Xine Xine Lib	Up to 1.1.14
Xine Xine Lib	Version 0.9.13
Xine Xine Lib	Version 1.0.1
Xine Xine Lib	Version 1.0.2
Xine Xine Lib	Version 1.0.3a
Xine Xine Lib	Version 1.0
Xine Xine Lib	Version 1.1.0
Xine Xine Lib	Version 1.1.10.1
Xine Xine Lib	Version 1.1.10
Xine Xine Lib	Version 1.1.11.1
Xine Xine Lib	Version 1.1.11
Xine Xine Lib	Version 1.1.12
Xine Xine Lib	Version 1.1.13
Xine Xine Lib	Version 1.1.1
Xine Xine Lib	Version 1.1.2
Xine Xine Lib	Version 1.1.3
Xine Xine Lib	Version 1.1.4
Xine Xine Lib	Version 1.1.5
Xine Xine Lib	Version 1.1.6
Xine Xine Lib	Version 1.1.7
Xine Xine Lib	Version 1.1.8
Xine Xine Lib	Version 1.1.9.1
Xine Xine Lib	Version 1.1.9
Xine Xine Lib	Version 1 rc0a
Xine Xine Lib	Version 1 rc1
Xine Xine Lib	Version 1 rc2
Xine Xine Lib	Version 1 rc3
Xine Xine Lib	Version 1 rc3a
Xine Xine Lib	Version 1 rc3b
Xine Xine Lib	Version 1 rc3c
Xine Xine Lib	Version 1 rc4
Xine Xine Lib	Version 1 rc4a
Xine Xine Lib	Version 1 rc5
Xine Xine Lib	Version 1 rc6a
Xine Xine Lib	Version 1 rc7
Xine Xine Lib	Version 1 rc8
Xine Xine Lib	Version 1_beta10
Xine Xine Lib	Version 1_beta11
Xine Xine Lib	Version 1_beta12
Xine Xine Lib	Version 1_beta1
Xine Xine Lib	Version 1_beta2
Xine Xine Lib	Version 1_beta3
Xine Xine Lib	Version 1_beta4
Xine Xine Lib	Version 1_beta5
Xine Xine Lib	Version 1_beta6
Xine Xine Lib	Version 1_beta7
Xine Xine Lib	Version 1_beta8
Xine Xine Lib	Version 1_beta9