CVE-2008-5236

Severity Score

9.3

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Multiple heap-based buffer overflows in xine-lib 1.1.12, and other 1.1.15 and earlier versions, allow remote attackers to execute arbitrary code via vectors related to (1) a crafted EBML element length processed by the parse_block_group function in demux_matroska.c; (2) a certain combination of sps, w, and h values processed by the real_parse_audio_specific_data and demux_real_send_chunk functions in demux_real.c; and (3) an unspecified combination of three values processed by the open_ra_file function in demux_realaudio.c. NOTE: vector 2 reportedly exists because of an incomplete fix in 1.1.15.

Múltiples desbordamientos de búfer basados en montículo en xine-lib v1.1.12 y otra v1.1.15 y versiones anteriores , permiten a atacantes remotos ejecutar código de su elección a través de vectores relacionados con (1) un tamaño manipulado del elemento EBML procesado por la función parse_block_group en demux_matroska.c; (2) una determinada combinación de los valores "sps", "w" y "h" procesados por las funciones real_parse_audio_specific_data y demux_real_send_chunk functions en demux_real.c y (3) una combinación no especificada de tres valores procesados por la función open_ra_file en demux_realaudio.c. NOTA: Al parecer el vector 2 existe por una reparación incompleta en la v1.1.15.

*Credits: N/A

CVSS Scores

NISTv2 9.3

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2008-11-25 CVE Reserved
2008-11-26 CVE Published
2023-05-26 EPSS Updated
2024-08-07 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CAPEC

References (19)

URL	Tag	Source
http://secunia.com/advisories/31502	Third Party Advisory
http://secunia.com/advisories/31827	Third Party Advisory
http://secunia.com/advisories/33544	Third Party Advisory
http://securityreason.com/securityalert/4648	Third Party Advisory
http://sourceforge.net/project/shownotes.php?release_id=619869	X_refsource_misc
http://www.ocert.org/analysis/2008-008/analysis.txt	X_refsource_misc
http://www.osvdb.org/47744	Vdb Entry
http://www.securityfocus.com/archive/1/495674/100/0/threaded	Mailing List
http://www.securityfocus.com/bid/30797	Vdb Entry
http://www.vupen.com/english/advisories/2008/2382	Vdb Entry
http://www.vupen.com/english/advisories/2008/2427	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/44634	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/44642	Vdb Entry

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html	2018-10-11
http://secunia.com/advisories/31567	2018-10-11
http://www.mandriva.com/security/advisories?name=MDVSA-2009:020	2018-10-11
https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00174.html	2018-10-11
https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00385.html	2018-10-11
https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00555.html	2018-10-11

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Xine Search vendor "Xine"		Xine Search vendor "Xine" for product "Xine"				<= 1.1.5 Search vendor "Xine" for product "Xine" and version " <= 1.1.5"		-		Affected
Xine Search vendor "Xine"		Xine Search vendor "Xine" for product "Xine"				0.9.13 Search vendor "Xine" for product "Xine" and version "0.9.13"		-		Affected
Xine Search vendor "Xine"		Xine Search vendor "Xine" for product "Xine"				1 Search vendor "Xine" for product "Xine" and version "1"		beta1		Affected
Xine Search vendor "Xine"		Xine Search vendor "Xine" for product "Xine"				1 Search vendor "Xine" for product "Xine" and version "1"		beta10		Affected
Xine Search vendor "Xine"		Xine Search vendor "Xine" for product "Xine"				1 Search vendor "Xine" for product "Xine" and version "1"		beta11		Affected
Xine Search vendor "Xine"		Xine Search vendor "Xine" for product "Xine"				1 Search vendor "Xine" for product "Xine" and version "1"		beta12		Affected
Xine Search vendor "Xine"		Xine Search vendor "Xine" for product "Xine"				1 Search vendor "Xine" for product "Xine" and version "1"		beta2		Affected
Xine Search vendor "Xine"		Xine Search vendor "Xine" for product "Xine"				1 Search vendor "Xine" for product "Xine" and version "1"		beta3		Affected
Xine Search vendor "Xine"		Xine Search vendor "Xine" for product "Xine"				1 Search vendor "Xine" for product "Xine" and version "1"		beta4		Affected
Xine Search vendor "Xine"		Xine Search vendor "Xine" for product "Xine"				1 Search vendor "Xine" for product "Xine" and version "1"		beta5		Affected
Xine Search vendor "Xine"		Xine Search vendor "Xine" for product "Xine"				1 Search vendor "Xine" for product "Xine" and version "1"		beta6		Affected
Xine Search vendor "Xine"		Xine Search vendor "Xine" for product "Xine"				1 Search vendor "Xine" for product "Xine" and version "1"		beta7		Affected
Xine Search vendor "Xine"		Xine Search vendor "Xine" for product "Xine"				1 Search vendor "Xine" for product "Xine" and version "1"		beta8		Affected
Xine Search vendor "Xine"		Xine Search vendor "Xine" for product "Xine"				1 Search vendor "Xine" for product "Xine" and version "1"		beta9		Affected
Xine Search vendor "Xine"		Xine Search vendor "Xine" for product "Xine"				1 Search vendor "Xine" for product "Xine" and version "1"		rc0a		Affected
Xine Search vendor "Xine"		Xine Search vendor "Xine" for product "Xine"				1 Search vendor "Xine" for product "Xine" and version "1"		rc1		Affected
Xine Search vendor "Xine"		Xine Search vendor "Xine" for product "Xine"				1 Search vendor "Xine" for product "Xine" and version "1"		rc2		Affected
Xine Search vendor "Xine"		Xine Search vendor "Xine" for product "Xine"				1 Search vendor "Xine" for product "Xine" and version "1"		rc3		Affected
Xine Search vendor "Xine"		Xine Search vendor "Xine" for product "Xine"				1 Search vendor "Xine" for product "Xine" and version "1"		rc3a		Affected
Xine Search vendor "Xine"		Xine Search vendor "Xine" for product "Xine"				1 Search vendor "Xine" for product "Xine" and version "1"		rc3b		Affected
Xine Search vendor "Xine"		Xine Search vendor "Xine" for product "Xine"				1 Search vendor "Xine" for product "Xine" and version "1"		rc3c		Affected
Xine Search vendor "Xine"		Xine Search vendor "Xine" for product "Xine"				1 Search vendor "Xine" for product "Xine" and version "1"		rc4		Affected
Xine Search vendor "Xine"		Xine Search vendor "Xine" for product "Xine"				1 Search vendor "Xine" for product "Xine" and version "1"		rc4a		Affected
Xine Search vendor "Xine"		Xine Search vendor "Xine" for product "Xine"				1 Search vendor "Xine" for product "Xine" and version "1"		rc5		Affected
Xine Search vendor "Xine"		Xine Search vendor "Xine" for product "Xine"				1 Search vendor "Xine" for product "Xine" and version "1"		rc6a		Affected
Xine Search vendor "Xine"		Xine Search vendor "Xine" for product "Xine"				1 Search vendor "Xine" for product "Xine" and version "1"		rc7		Affected
Xine Search vendor "Xine"		Xine Search vendor "Xine" for product "Xine"				1 Search vendor "Xine" for product "Xine" and version "1"		rc8		Affected
Xine Search vendor "Xine"		Xine Search vendor "Xine" for product "Xine"				1.0 Search vendor "Xine" for product "Xine" and version "1.0"		-		Affected
Xine Search vendor "Xine"		Xine Search vendor "Xine" for product "Xine"				1.0.1 Search vendor "Xine" for product "Xine" and version "1.0.1"		-		Affected
Xine Search vendor "Xine"		Xine Search vendor "Xine" for product "Xine"				1.0.2 Search vendor "Xine" for product "Xine" and version "1.0.2"		-		Affected
Xine Search vendor "Xine"		Xine Search vendor "Xine" for product "Xine"				1.0.3a Search vendor "Xine" for product "Xine" and version "1.0.3a"		-		Affected
Xine Search vendor "Xine"		Xine Search vendor "Xine" for product "Xine"				1.1.0 Search vendor "Xine" for product "Xine" and version "1.1.0"		-		Affected
Xine Search vendor "Xine"		Xine Search vendor "Xine" for product "Xine"				1.1.1 Search vendor "Xine" for product "Xine" and version "1.1.1"		-		Affected
Xine Search vendor "Xine"		Xine Search vendor "Xine" for product "Xine"				1.1.2 Search vendor "Xine" for product "Xine" and version "1.1.2"		-		Affected
Xine Search vendor "Xine"		Xine Search vendor "Xine" for product "Xine"				1.1.3 Search vendor "Xine" for product "Xine" and version "1.1.3"		-		Affected
Xine Search vendor "Xine"		Xine Search vendor "Xine" for product "Xine"				1.1.4 Search vendor "Xine" for product "Xine" and version "1.1.4"		-		Affected
Xine Search vendor "Xine"		Xine Search vendor "Xine" for product "Xine"				1.1.10.1 Search vendor "Xine" for product "Xine" and version "1.1.10.1"		-		Affected
Xine Search vendor "Xine"		Xine Search vendor "Xine" for product "Xine"				1.1.11 Search vendor "Xine" for product "Xine" and version "1.1.11"		-		Affected
Xine Search vendor "Xine"		Xine Search vendor "Xine" for product "Xine"				1.1.11.1 Search vendor "Xine" for product "Xine" and version "1.1.11.1"		-		Affected