FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2008-3231

This CVE name corresponds to:

Entered Topic
2008-10-19 libxine -- denial of service vulnerability

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

Details

Type Candidate
Name CVE-2008-3231
Phase Assigned(20080718)

Description

xine-lib before 1.1.15 allows remote attackers to cause a denial of service (crash) via a crafted OGG file, as demonstrated by playing lol-ffplay.ogg with xine.

References

Source Reference
MLIST [oss-security] 20080713 CVE requests: crashers by zzuf
CONFIRM http://sourceforge.net/project/shownotes.php?release_id=619869
FEDORA FEDORA-2008-7512
FEDORA FEDORA-2008-7572
MANDRIVA MDVSA-2009:020
SUSE SUSE-SR:2009:004
BID 30699
SECUNIA 31827
VUPEN ADV-2008-2382
SECTRACK 1020703
XF xine-ogg-dos(44040)