CVE-2008-3231
Published: 18 July 2008
xine-lib before 1.1.15 allows remote attackers to cause a denial of service (crash) via a crafted OGG file, as demonstrated by playing lol-ffplay.ogg with xine.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
xine-lib Launchpad, Ubuntu, Debian |
dapper |
Released
(1.1.1+ubuntu2-7.10)
|
| feisty |
Ignored
(end of life, was needed)
|
|
| gutsy |
Released
(1.1.7-1ubuntu1.4)
|
|
| hardy |
Released
(1.1.11.1-1ubuntu3.2)
|
|
| intrepid |
Not vulnerable
(1.1.15-0ubuntu1)
|
|
| upstream |
Released
(1.1.14-2)
|
|
|
Patches: upstream: http://hg.debian.org/hg/xine-lib/xine-lib?cmd=changeset;node=967a8e515380c0c9b9858125a054082145002d00;style=gitweb upstream: http://hg.debian.org/hg/xine-lib/xine-lib?cmd=changeset;node=608e33e144c7eebe016fbf306771bff4219d1629;style=gitweb upstream: http://hg.debian.org/hg/xine-lib/xine-lib?cmd=changeset;node=67bfec7af3472674ba7396bd468b7607339fe102;style=gitweb upstream: http://hg.debian.org/hg/xine-lib/xine-lib?cmd=changeset;node=4519eeeda3b3a20489b3699693d801c3696221da;style=gitweb upstream: http://hg.debian.org/hg/xine-lib/xine-lib?cmd=changeset;node=18059453374c49ebfc9660dcc34acc28afa57d17;style=gitweb |
||