Xine vulnerabilities, page 3
48 vulnerabilities
Known vulnerabilities in Xine products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 6 products.
MediumCVE-2009-1274xine · xine-libxine xine-libInteger overflow in the qt_error parse_trak_atom function in demuxers/demux_qt.c in xine-lib 1.1.16.2 and earlier allows remote attackers to execute arbitrary code via a Quicktime movie file with a large count value in an STTS atom, which triggers a heap-based buffer overflow.EPSS5.06%HighCVE-2009-0698xine · xine-libxine xine-libInteger overflow in the 4xm demuxer (demuxers/demux_4xm.c) in xine-lib 1.1.16.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a 4X movie file with a large current_track value, a similar issue to CVE-2009-0385.EPSS3.63%MediumCVE-2006-2200debian · libmms +2 moredebian libmmsStack-based buffer overflow in libmms, as used by (a) MiMMS 0.0.9 and (b) xine-lib 1.1.0 and earlier, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via the (1) send_command, (2) string_utf16, (3) get_data, and (4) get_media_packet functions, and possibly other functions.EPSS4.31%MediumCVE-2006-2230debian · xine-ui +1 moredebian xine-uiMultiple format string vulnerabilities in xiTK (xitk/main.c) in xine 0.99.4 might allow attackers to cause a denial of service via format string specifiers in an MP3 filename specified on the command line. NOTE: this is a different vulnerability than CVE-2006-1905. In addition, if the only attack vectors involve a user-assisted, local command line argument of a non-setuid program, this issue might not be a vulnerability.EPSS7.26%MediumCVE-2006-2802debian · xine-lib +2 moredebian xine-libBuffer overflow in the HTTP Plugin (xineplug_inp_http.so) for xine-lib 1.1.1 allows remote attackers to cause a denial of service (application crash) via a long reply from an HTTP server, as demonstrated using gxine 0.5.6.EPSS11.09%HighCVE-2006-1664xine · xine-libxine xine-libBuffer overflow in xine_list_delete_current in libxine 1.14 and earlier, as distributed in xine-lib 1.1.1 and earlier, allows remote attackers to execute arbitrary code via a crafted MPEG stream.EPSS14.97%HighCVE-2006-1905debian · xine-ui +1 moredebian xine-uiMultiple format string vulnerabilities in xiTK (xitk/main.c) in xine 0.99.3 allow remote attackers to execute arbitrary code via format string specifiers in a long filename on an EXTINFO line in a playlist file.EPSS14.58%HighCVE-2006-4799xine · xine-libxine xine-libBuffer overflow in ffmpeg for xine-lib before 1.1.2 might allow context-dependent attackers to execute arbitrary code via a crafted AVI file and "bad indexes", a different vulnerability than CVE-2005-4048 and CVE-2006-2802.EPSS2.86%