Candidate: CVE-2008-5243
PublicDate: 2008-11-26 01:30:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5243
 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=498243
 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508716
 https://ubuntu.com/security/notices/USN-710-1
Description:
 The real_parse_headers function in demux_real.c in xine-lib 1.1.12, and
 other 1.1.15 and earlier versions, relies on an untrusted input length
 value to "reindex into an allocated buffer," which allows remote attackers
 to cause a denial of service (crash) via a crafted value, probably an array
 index error.
Ubuntu-Description:
Notes:
Bugs:
Priority: low
Discovered-by:
Assigned-to:
CVSS: 

Patches_xine-lib:
 upstream: http://hg.debian.org/hg/xine-lib/xine-lib?cmd=changeset;node=4982c9920f42657d0797145bf197127f18d8972c;style=gitweb
upstream_xine-lib: needs-triage
dapper_xine-lib: released (1.1.1+ubuntu2-7.10)
gutsy_xine-lib: released (1.1.7-1ubuntu1.4)
hardy_xine-lib: released (1.1.11.1-1ubuntu3.2)
intrepid_xine-lib: released (1.1.15-0ubuntu3.1)
devel_xine-lib: released (1.1.16.1-2ubuntu1)