Gentoo Linux: 200801-12 Alert: xine-lib Heap Overflow Exploit
gentoo
January 27, 2008
xine-lib is vulnerable to multiple heap-based buffer overflows when processing RTSP streams.
Summary
Gentoo Linux Security Advisory GLSA 200801-12
https://security.gentoo.org/
Severity: Normal
Title: xine-lib: User-assisted execution of arbitrary code
Date: January 27, 2008
Bugs: #205197
ID: 200801-12
Synopsis
=======
xine-lib is vulnerable to multiple heap-based buffer overflows when
processing RTSP streams.
Background
=========
xine-lib is the core library package for the xine media player.
Affected packages
================
-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 media-libs/xine-lib < 1.1.9.1 >= 1.1.9.1
==========
Luigi Auriemma reported that xine-lib does not properly check
boundaries when processing SDP attributes of RTSP streams, leading to
heap-based buffer overflows.
Impact
===...
Topics Covered
Resolution
References
Availability
style>.gentoo_availability{display:block;}
Concerns
PREVIOUS
NEXT
Topics Covered
Background
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Affected Packages
Impact
Workaround
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!