// For flags

CVE-2008-0073

Kantaris 0.3.4 - SSA Subtitle Local Buffer Overflow

Severity Score

9.8
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

1
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Array index error in the sdpplin_parse function in input/libreal/sdpplin.c in xine-lib 1.1.10.1 allows remote RTSP servers to execute arbitrary code via a large streamid SDP parameter.

Error de índice de array en la función sdpplin_parse de input/libreal/sdpplin.c en xine-lib 1.1.10.1 permite a servidores RTSP remotos ejecutar código de su elección a través de un parámetro streamid SDP grande.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2008-01-03 CVE Reserved
  • 2008-03-24 CVE Published
  • 2008-04-25 First Exploit
  • 2024-08-07 CVE Updated
  • 2025-03-30 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
  • CWE-189: Numeric Errors
CAPEC
References (35)
URL Tag Source
http://secunia.com/advisories/29392 Third Party Advisory
http://secunia.com/advisories/29472 Third Party Advisory
http://secunia.com/advisories/29503 Third Party Advisory
http://secunia.com/advisories/29578 Third Party Advisory
http://secunia.com/advisories/29601 Third Party Advisory
http://secunia.com/advisories/29740 Third Party Advisory
http://secunia.com/advisories/29766 Third Party Advisory
http://secunia.com/advisories/29800 Third Party Advisory
http://secunia.com/advisories/30581 Third Party Advisory
http://secunia.com/advisories/31372 Third Party Advisory
http://secunia.com/advisories/31393 Third Party Advisory
http://wiki.videolan.org/Changelog/0.8.6f X_refsource_confirm
http://www.securityfocus.com/bid/28312 Vdb Entry
http://www.securitytracker.com/id?1019682 Vdb Entry
http://www.videolan.org/security/sa0803.php X_refsource_confirm
http://www.vupen.com/english/advisories/2008/0923 Vdb Entry
http://www.vupen.com/english/advisories/2008/0985 Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/41339 Vdb Entry
URL Date SRC
https://www.exploit-db.com/exploits/5498 2008-04-25
URL Date SRC
http://sourceforge.net/project/shownotes.php?release_id=585488&group_id=9655 2017-08-08
http://xinehq.de/index.php/news 2017-08-08
URL Date SRC
http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00008.html 2017-08-08
http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html 2017-08-08
http://secunia.com/advisories/28694 2017-08-08
http://secunia.com/secunia_research/2008-10 2017-08-08
http://security.gentoo.org/glsa/glsa-200804-25.xml 2017-08-08
http://security.gentoo.org/glsa/glsa-200808-01.xml 2017-08-08
http://www.debian.org/security/2008/dsa-1536 2017-08-08
http://www.debian.org/security/2008/dsa-1543 2017-08-08
http://www.mandriva.com/security/advisories?name=MDVSA-2008:178 2017-08-08
http://www.mandriva.com/security/advisories?name=MDVSA-2008:219 2017-08-08
http://www.slackware.org/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.392408 2017-08-08
http://www.ubuntu.com/usn/usn-635-1 2017-08-08
https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00143.html 2017-08-08
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00456.html 2017-08-08
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Xine
Search vendor "Xine"
 Xine-lib
Search vendor "Xine" for product "Xine-lib"
 1.1.10.1
Search vendor "Xine" for product "Xine-lib" and version "1.1.10.1"
-
Affected
in Redhat
Search vendor "Redhat"
 Fedora
Search vendor "Redhat" for product "Fedora"
 8
Search vendor "Redhat" for product "Fedora" and version "8"
-
Safe