OSVDB ID: 47744

Title: xine-lib src/demuxers/demux_realaudio.c open_ra_file() Function Overflow

Info

Disclosure

Aug 22, 2008

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Classification

Location: Local / Remote, Context Dependent
Attack Type: Input Manipulation
Impact: Loss of Integrity
Disclosure: Vendor Verified, Coordinated Disclosure

Solution

The 1.1.15 release reportedly fixes one vector, but improperly fixes the numeric overflow.

Products

Unknown or Incomplete

References

Secunia Advisory ID: 31567 31827
Related OSVDB ID: 47741 47742 47743 47745 47746 47747 47748
Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2008-08/0225.html
Vendor Specific Solution URL: http://sourceforge.net/project/shownotes.php?release_id=619869&group_id=9655
Other Advisory URL: http://www.ocert.org/advisories/ocert-2008-008.html
http://www.ocert.org/analysis/2008-008/analysis.txt
https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00174.html

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/47744