Gentoo Linux Security Advisory GLSA 200802-12
https://security.gentoo.org/
Severity: Normal
Title: xine-lib: User-assisted execution of arbitrary code
Date: February 26, 2008
Bugs: #209106, #208100
ID: 200802-12
Synopsis
=======
xine-lib is vulnerable to multiple buffer overflows when processing
FLAC and ASF streams.
Background
=========
xine-lib is the core library package for the xine media player.
Affected packages
================
-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 media-libs/xine-lib < 1.1.10.1 >= 1.1.10.1
==========
Damian Frizza and Alfredo Ortega (Core Security Technologies)
discovered a stack-based buffer overflow within the open_flac_file()
function in the file demux_flac.c...
style>.gentoo_availability{display:block;}
Get the latest Linux and open source security news straight to your inbox.