Candidate: CVE-2008-5248 PublicDate: 2008-11-26 01:30:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5248 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=498243 https://ubuntu.com/security/notices/USN-710-1 Description: xine-lib before 1.1.15 allows remote attackers to cause a denial of service (crash) via "MP3 files with metadata consisting only of separators." Ubuntu-Description: Notes: Bugs: Priority: low Discovered-by: Assigned-to: CVSS: Patches_xine-lib: upstream: http://hg.debian.org/hg/xine-lib/xine-lib/?cmd=changeset;node=60ab5d2bdd82f00b10205f816a545337c9363134;style=gitweb upstream_xine-lib: released (1.1.15) dapper_xine-lib: released (1.1.1+ubuntu2-7.10) gutsy_xine-lib: released (1.1.7-1ubuntu1.4) hardy_xine-lib: released (1.1.11.1-1ubuntu3.2) intrepid_xine-lib: not-affected (1.1.15-0ubuntu1) devel_xine-lib: not-affected (1.1.15-0ubuntu1)