Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2008-1878 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Xine-lib

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer8 documents7 sources
Severity
7.5HIGHNVD
EPSS
7.9%
top 7.93%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Xine Xine-lib
Timeline
PublishedApr 17
Latest updateMay 1

Description

Stack-based buffer overflow in the demux_nsf_send_chunk function in src/demuxers/demux_nsf.c in xine-lib 1.1.12 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long NSF title.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

▶NVDxine/xine-lib1.1.12+7

🔴Vulnerability Details

2
GHSA
GHSA-22c4-4rv3-jj9h: Stack-based buffer overflow in the demux_nsf_send_chunk function in src/demuxers/demux_nsf↗2022-05-01
▶
CVEList
CVE-2008-1878: Stack-based buffer overflow in the demux_nsf_send_chunk function in src/demuxers/demux_nsf↗2008-04-17
▶

💥Exploits & PoCs

1
Exploit-DB
Xine-Lib 1.1.12 - NSF demuxer Stack Overflow (PoC)↗2008-04-16
▶

📋Vendor Advisories

2
Ubuntu
xine-lib vulnerabilities↗2008-08-06
▶
Red Hat
xine-lib: buffer overflow in nsf demuxer (CVE-2008-1964)↗2008-04-17
▶

💬Community

2
Bugzilla
CVE-2008-1878 xine-lib: buffer overflow in nsf demuxer [EPEL-5]↗2008-04-24
▶
Bugzilla
CVE-2008-1878 xine-lib: buffer overflow in nsf demuxer (CVE-2008-1964)↗2008-04-17
▶
CVE-2008-1878 — Xine Xine-lib vulnerability | cvebase