FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2008-5240

This CVE name corresponds to:

Entered	Topic
2009-05-17	libxine -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2008-5240 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2008-5240
Phase	Assigned(20081125)

Description

xine-lib 1.1.12, and other 1.1.15 and earlier versions, relies on an untrusted input value to determine the memory allocation and does not check the result for (1) the MATROSKA_ID_TR_CODECPRIVATE track entry element processed by demux_matroska.c; and (2) PROP_TAG, (3) MDPR_TAG, and (4) CONT_TAG chunks processed by the real_parse_headers function in demux_real.c; which allows remote attackers to cause a denial of service (NULL pointer dereference and crash) or possibly execute arbitrary code via a crafted value.

References

Source	Reference
BUGTRAQ	20080822 [oCERT-2008-008] multiple heap overflows in xine-lib
MISC	http://www.ocert.org/analysis/2008-008/analysis.txt
FEDORA	FEDORA-2009-0542
FEDORA	FEDORA-2008-7512
FEDORA	FEDORA-2008-7572
MANDRIVA	MDVSA-2009:020
SUSE	SUSE-SR:2009:004
BID	30797
OSVDB	47742
SECUNIA	33544
SECUNIA	31827
SREASON	4648
XF	xinelib-demuxmatroska-dos(44653)