Xine vulnerabilities

Products

• Xine-lib 38
• Xine 14
• Gxine 3
• Xine-ui 2

Newest

• xine xine-lib Integer overflow in the qt_error parse_trak_atom function in demuxers/demux_qt.c in xine-lib 1.1... CVE-2009-1274 5.0 MediumApril 8, 2009
• xine xine-lib Integer overflow in the 4xm demuxer (demuxers/demux_4xm.c) in xine-lib 1.1.16.1 allows remote... CVE-2009-0698 7.5 HighFebruary 23, 2009
• xine xine-lib xine-lib before 1.1.15 allows remote attackers to cause a denial of service (crash) via "MP3... CVE-2008-5248 4.3 MediumNovember 26, 2008
• xine xine-lib The real_parse_audio_specific_data function in demux_real.c in xine-lib 1.1.12, and other 1.1.15... CVE-2008-5247 4.3 MediumNovember 26, 2008
• xine xine-lib Multiple heap-based buffer overflows in xine-lib before 1.1.15 allow remote attackers to execute... CVE-2008-5246 9.3 HighNovember 26, 2008
• xine xine-lib xine-lib before 1.1.15 performs V4L video frame preallocation before ascertaining the required... CVE-2008-5245 9.3 HighNovember 26, 2008
• xine xine-lib Unspecified vulnerability in xine-lib before 1.1.15 has unknown impact and attack vectors related... CVE-2008-5244 Fix available 10.0 HighNovember 26, 2008
• xine xine-lib The real_parse_headers function in demux_real.c in xine-lib 1.1.12, and other 1.1.15 and earlier... CVE-2008-5243 4.3 MediumNovember 26, 2008
• xine xine-lib demux_qt.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, does not validate the count... CVE-2008-5242 6.8 MediumNovember 26, 2008
• xine xine-lib Integer underflow in demux_qt.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, allows... CVE-2008-5241 4.3 MediumNovember 26, 2008
• xine xine-lib xine-lib 1.1.12, and other 1.1.15 and earlier versions, relies on an untrusted input value to... CVE-2008-5240 4.3 MediumNovember 26, 2008
• xine xine-lib xine-lib 1.1.12, and other 1.1.15 and earlier versions, does not properly handle (a) negative and... CVE-2008-5239 4.3 MediumNovember 26, 2008
• xine Integer overflow in the real_parse_mdpr function in demux_real.c in xine-lib 1.1.12, and other... CVE-2008-5238 7.1 HighNovember 26, 2008
• xine Multiple integer overflows in xine-lib 1.1.12, and other 1.1.15 and earlier versions, allow... CVE-2008-5237 10.0 HighNovember 26, 2008
• xine Multiple heap-based buffer overflows in xine-lib 1.1.12, and other 1.1.15 and earlier versions,... CVE-2008-5236 9.3 HighNovember 26, 2008
• xine Heap-based buffer overflow in the demux_real_send_chunk function in src/demuxers/demux_real.c in... CVE-2008-5235 9.3 HighNovember 26, 2008
• xine xine-lib Multiple heap-based buffer overflows in xine-lib 1.1.12, and other versions before 1.1.15, allow... CVE-2008-5234 9.3 HighNovember 26, 2008
• xine xine-lib xine-lib 1.1.12, and other versions before 1.1.15, does not check for failure of malloc in... CVE-2008-5233 4.3 MediumNovember 26, 2008
• xine xine-lib xine-lib before 1.1.15 allows remote attackers to cause a denial of service (crash) via a crafted... CVE-2008-3231 4.3 MediumJuly 18, 2008
• xine xine-lib Stack-based buffer overflow in the demux_nsf_send_chunk function in src/demuxers/demux_nsf.c in... CVE-2008-1878 Public exploit EPSS 15.0% 7.5 HighApril 17, 2008
• xine xine-lib, xiph libfishsound, speex +2 more Array index vulnerability in Speex 1.1.12 and earlier, as used in libfishsound 0.9.0 and earlier,... CVE-2008-1686 Fix available 9.3 HighApril 8, 2008
• xine xine-lib Multiple integer overflows in xine-lib 1.1.11 and earlier allow remote attackers to trigger heap... CVE-2008-1482 Public exploitFix available 6.8 MediumMarch 24, 2008
• xine xine-lib Array index error in the sdpplin_parse function in input/libreal/sdpplin.c in xine-lib 1.1.10.1... CVE-2008-0073 Public exploitFix available 6.8 MediumMarch 24, 2008
• xine xine-lib, xine-plugin +1 more Buffer overflow in demuxers/demux_asf.c (aka the ASF demuxer) in the xineplug_dmx_asf.so plugin... CVE-2008-1110 Public exploit EPSS 10.4% 6.8 MediumFebruary 29, 2008
• mplayer, xine xine-lib +1 more Array index vulnerability in libmpdemux/demux_audio.c in MPlayer 1.0rc2 and SVN before r25917,... CVE-2008-0486 Fix available 7.5 HighFebruary 5, 2008
• xine xine-lib Multiple heap-based buffer overflows in the rmff_dump_cont function in input/libreal/rmff.c in... CVE-2008-0238 7.5 HighJanuary 11, 2008
• xine xine-lib Heap-based buffer overflow in the rmff_dump_cont function in input/libreal/rmff.c in xine-lib 1.1... CVE-2008-0225 Public exploitFix available EPSS 15.0% 6.4 MediumJanuary 10, 2008
• xine XINE 0.99.4 allows user-assisted remote attackers to cause a denial of service (application crash... CVE-2007-0255 9.3 HighJanuary 16, 2007
• xine xine-ui Format string vulnerability in the errors_create_window function in errors.c in xine-ui allows... CVE-2007-0254 Fix available 10.0 HighJanuary 16, 2007
• mplayer, xine real media input plugin +1 more Buffer overflow in the asmrp_eval function in the RealMedia RTSP stream handler (asmrp.c) for... CVE-2006-6172 Fix available 7.5 HighNovember 30, 2006
• xine xine-lib Buffer overflow in ffmpeg for xine-lib before 1.1.2 might allow context-dependent attackers to... CVE-2006-4799 7.5 HighSeptember 14, 2006
• mimms, xine xine-lib +1 more Stack-based buffer overflow in libmms, as used by (a) MiMMS 0.0.9 and (b) xine-lib 1.1.0 and... CVE-2006-2200 Fix available 5.1 MediumJune 27, 2006
• xine gxine, xine-lib +1 more Buffer overflow in the HTTP Plugin (xineplug_inp_http.so) for xine-lib 1.1.1 allows remote... CVE-2006-2802 Public exploitFix available EPSS 11.1% 5.0 MediumJune 3, 2006
• xine Multiple format string vulnerabilities in xiTK (xitk/main.c) in xine 0.99.4 might allow attackers... CVE-2006-2230 Public exploitFix available 5.0 MediumMay 5, 2006
• xine Multiple format string vulnerabilities in xiTK (xitk/main.c) in xine 0.99.3 allow remote... CVE-2006-1905 Public exploitFix available EPSS 14.6% 7.5 HighApril 20, 2006
• xine xine-lib Buffer overflow in xine_list_delete_current in libxine 1.14 and earlier, as distributed in xine... CVE-2006-1664 Public exploit EPSS 15.0% 7.5 HighApril 7, 2006
• xine xine-lib Format string vulnerability in input_cdda.c in xine-lib 1-beta through 1-beta 3, 1-rc, 1.0... CVE-2005-2967 Public exploitFix available 7.5 HighOctober 12, 2005
• xine gxine Format string vulnerability in gxine 0.4.1 through 0.4.4, and other versions down to 0.3, allows... CVE-2005-1692 7.5 HighMay 24, 2005
• mplayer, xine xine-lib +1 more Multiple heap-based buffer overflows in the code used to handle (1) MMS over TCP (MMST) streams... CVE-2005-1195 7.5 HighApril 21, 2005
• xine, xine xine-ui, xine-lib +2 more xine 1.x alpha, 1.x beta, and 1.0rc through 1.0rc3a, and xine-ui 0.9.21 to 0.9.23 allows remote... CVE-2004-1951 Public exploitFix available 5.0 MediumDecember 31, 2004
• xine, xine xine-lib, suse linux +2 more Stack-based buffer overflow in the VideoCD (VCD) code in xine-lib 1-rc2 through 1-rc5, as derived... CVE-2004-1476 Fix available 5.1 MediumDecember 31, 2004
• xine, xine xine-lib +1 more Multiple stack-based buffer overflows in xine-lib 1-rc2 through 1-rc5 allow attackers to execute... CVE-2004-1475 Public exploit 5.1 MediumDecember 31, 2004
• xine xine-lib Stack-based buffer overflow in Xine-lib-rc5 in xine-lib 1_rc5-r2 and earlier allows remote... CVE-2004-1455 5.1 MediumDecember 31, 2004
• xine xine-lib Buffer overflow in the open_aiff_file function in demux_aiff.c for xine-lib (libxine) 1-rc7... CVE-2004-1300 Public exploit 10.0 HighDecember 22, 2004
• mplayer, xine, mandrakesoft mandrake linux +1 more +3 more The pnm_get_chunk function in xine 0.99.2 and earlier, and other packages such as MPlayer that... CVE-2004-1188 10.0 HighDecember 22, 2004
• mplayer, xine, mandrakesoft mandrake linux +1 more +3 more Heap-based buffer overflow in the pnm_get_chunk function for xine 0.99.2, and other packages such... CVE-2004-1187 10.0 HighDecember 22, 2004
• xine gxine, gentoo linux, kaffeine player +2 more Buffer overflow in the http_open function in Kaffeine before 0.5, whose code is also used in... CVE-2004-1034 Fix available 10.0 HighNovember 16, 2004
• xine, xine xine-lib +1 more Heap-based buffer overflow in the DVD subpicture decoder in xine xine-lib 1-rc5 and earlier... CVE-2004-1379 Fix available 7.5 HighSeptember 16, 2004
• mplayer, xine xine-lib +1 more Multiple buffer overflows in the Real-Time Streaming Protocol (RTSP) client for (1) MPlayer... CVE-2004-0433 Fix available 10.0 HighMay 5, 2004
• xine xine allows local users to overwrite arbitrary files via a symlink attack on a bug report email... CVE-2004-0372 Fix available 2.1 LowMarch 27, 2004