Xine : Security Vulnerabilities, CVEs, Published In 2009
Integer overflow in the qt_error parse_trak_atom function in demuxers/demux_qt.c in xine-lib 1.1.16.2 and earlier allows remote attackers to execute arbitrary code via a Quicktime movie file with a large count value in an STTS atom, which triggers a heap-based buffer overflow.
Max CVSS
5.0
EPSS Score
12.07%
Published
2009-04-08
Updated
2018-10-10
Integer overflow in the 4xm demuxer (demuxers/demux_4xm.c) in xine-lib 1.1.16.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a 4X movie file with a large current_track value, a similar issue to CVE-2009-0385.
Max CVSS
7.5
EPSS Score
6.71%
Published
2009-02-23
Updated
2018-10-10
2 vulnerabilities found