Candidate: CVE-2008-5241 PublicDate: 2008-11-26 01:30:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5241 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=498243 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=509008 https://ubuntu.com/security/notices/USN-710-1 Description: Integer underflow in demux_qt.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, allows remote attackers to cause a denial of service (crash) via a crafted media file that results in a small value of moov_atom_size in a compressed MOV (aka CMOV_ATOM). Ubuntu-Description: Notes: Bugs: Priority: low Discovered-by: Assigned-to: CVSS: Patches_xine-lib: upstream: http://hg.debian.org/hg/xine-lib/xine-lib?cmd=changeset;node=a57d5ef86b65bcc195a5358125fdb34e10a37bb4;style=gitweb upstream_xine-lib: needs-triage dapper_xine-lib: released (1.1.1+ubuntu2-7.10) gutsy_xine-lib: released (1.1.7-1ubuntu1.4) hardy_xine-lib: released (1.1.11.1-1ubuntu3.2) intrepid_xine-lib: released (1.1.15-0ubuntu3.1) devel_xine-lib: released (1.1.16.1-2ubuntu1)