OSVDB ID: 47747

Title: xine-lib src/demuxers/demux_mod.c open_mod_file() Function Filesize Handling

Info

Disclosure

Aug 22, 2008

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Classification

Location: Local / Remote, Context Dependent
Attack Type: Input Manipulation
Impact: Loss of Integrity
Solution: Upgrade
Disclosure: Vendor Verified, Coordinated Disclosure

Solution

Upgrade to version 1.1.15 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Unknown or Incomplete

References

Secunia Advisory ID: 31567 31827
Related OSVDB ID: 47741 47742 47743 47744 47745 47746 47748
Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2008-08/0225.html
Vendor Specific Solution URL: http://sourceforge.net/project/shownotes.php?release_id=619869&group_id=9655
Other Advisory URL: http://www.ocert.org/advisories/ocert-2008-008.html
http://www.ocert.org/analysis/2008-008/analysis.txt
https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00174.html

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/47747