OSVDB ID: 47741 Title: xine-lib src/demuxers/demux_qt.c Multiple Overflows |
Info |
|
|
Dates |
||||
|
|
Description |
Multiple overflows exists in xine-lib. The QT demuxer (src/demuxers/demux_qt.c) fails to properly sanitize input to the parse_moov_atom() function, parse_reference_atom() function, when handling compressed MOV (CMOV_ATOM) files and when allocating STSD_ATOM atoms resulting in an overflow. With a specially crafted file or request, an attacker can cause the execution of arbitrary code or force process termination. |
Classification |
Location:
Local / Remote,
Context Dependent
Attack Type: Input Manipulation Impact: Loss of Integrity Disclosure: Vendor Verified, Vendor Verified, Coordinated Disclosure |
Solution |
Upgrade to version 1.1.15 or higher, as it has been reported to fix the parse_moov_atom() function overflow. The other three vectors were not addresses in 1.1.15. An upgrade is required as there are no known workarounds. |
Products |
Unknown or Incomplete |
Credit |
Unknown or Incomplete |