xine-lib buffer overflows updated since 19.08.2004
Published:		30.12.2004
Source:		BUGTRAQ
SecurityVulns ID:		3923
Type:		library
Level:		6/10
Description:		buffer overflow in the PNM, VCD and DVD handling code.

Affected:		XINELIB : xine-lib 1.0
		XINE : xine 0.99
		XINE : xine 1.0

Original document		Michael Roitzsch, XSA-2004-7: stack overflow in AIFF demultiplexer (30.12.2004)
		IDEFENSE, iDEFENSE Security Advisory 12.21.04: Multiple Vendor Xine version 0.99.2 PNM Handler PNA_TAG Heap Overflow Vulnerability (22.12.2004)
		IDEFENSE, iDEFENSE Security Advisory 12.21.04: Multiple Vendor Xine version 0.99.2 PNM Handler Negative Read Length Heap Overflow Vulnerability (22.12.2004)
		XINE, XSA-2004-4: multiple string overflows (17.09.2004)
		XINE, XSA-2004-5: heap overflow in DVD subpicture decoder (17.09.2004)
		c0ntex_(at)_open-security.org, Open Security Group Advisory #6 (19.08.2004)
		GENTOO, [ GLSA 200408-18 ] xine-lib: VCD MRL buffer overflow (19.08.2004)

Files:		Xines_Mine - Remote proof of concept example
Discuss:		Read or add your comments to this news (0 comments)