CVE-2008-0295
Published: 16 January 2008
Heap-based buffer overflow in modules/access/rtsp/real_sdpplin.c in the Xine library, as used in VideoLAN VLC Media Player 0.8.6d and earlier, allows user-assisted remote attackers to cause a denial of service (crash) or execute arbitrary code via long Session Description Protocol (SDP) data.
Notes
| Author | Note |
|---|---|
| jdstrand | per Debian this does not affect xine-lib, just vlc as it ships a really old version |
Priority
Status
| Package | Release | Status |
|---|---|---|
|
vlc Launchpad, Ubuntu, Debian |
dapper |
Ignored
(end of life)
|
| edgy |
Ignored
(end of life, was needed)
|
|
| feisty |
Ignored
(end of life, was needed)
|
|
| gutsy |
Ignored
(end of life, was needed)
|
|
| hardy |
Released
(0.8.6e-0ubuntu1)
|
|
| intrepid |
Released
(0.8.6e-0ubuntu1)
|
|
| jaunty |
Released
(0.8.6e-0ubuntu1)
|
|
| karmic |
Released
(0.8.6e-0ubuntu1)
|
|
| upstream |
Released
(0.8.6e)
|