CVE-2008-3231 — Improper Input Validation in Xine-lib

CWE-20 — Improper Input Validation6 documents6 sources
Severity
4.3MEDIUMNVD
EPSS
2.0%
top 16.17%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Xine Xine-lib
Timeline
PublishedJul 18
Latest updateMay 1

Description

xine-lib before 1.1.15 allows remote attackers to cause a denial of service (crash) via a crafted OGG file, as demonstrated by playing lol-ffplay.ogg with xine.

CVSS vector

AV:N/AC:M/C:N/I:N/A:PExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

▶NVDxine/xine-lib1.1.14+25

Patches

Patch: www.securityfocus.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-h8cc-x256-xmjw: xine-lib before 1↗2022-05-01
▶
CVEList
CVE-2008-3231: xine-lib before 1↗2008-07-18
▶

📋Vendor Advisories

2
Ubuntu
xine-lib vulnerabilities↗2009-01-26
▶
Red Hat
xine-lib: crash on zzuf test case lol-ffplay.ogg↗
▶

💬Community

1
Bugzilla
CVE-2008-3231 xine-lib: crash on zzuf test case lol-ffplay.ogg↗2008-07-21
▶
CVE-2008-3231 — Improper Input Validation in Xine-lib | cvebase