CVE-2005-2967: xine xine-lib

EPSS trend

Probability

9.68%

Chance of exploitation in the next 30 days

Percentile

95%

Versus all other CVEs

30-day change

0.00 pp

From 9.68% on 21-09-2026

21-09-202621-10-2026

EPSS score

9.68%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
exploit-databaseremotelinuxVerified
Xine-Lib 1.1 - 'Media Player Library' Remote Format String
Maturity: weaponized

References

18 links

www.securityfocus.com/bid/15044VDB EntryX Refsource BIDExploitPatch
secunia.com/advisories/17132Third Party AdvisoryX Refsource SECUNIA
www.mandriva.com/security/advisories?name=MDKSA-2005:180Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/17282Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/17097Third Party AdvisoryX Refsource SECUNIA
www.osvdb.org/19892VDB EntryX Refsource OSVDB
slackware.com/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.415454Vendor AdvisoryX Refsource SLACKWARE
xinehq.de/index.php/security/XSA-2005-1X Refsource CONFIRMPatchVendor Advisory
www.debian.org/security/2005/dsa-863Vendor AdvisoryX Refsource DEBIANPatch
archives.neohapsis.com/archives/fulldisclosure/2005-10/0196.htmlMailing ListX Refsource FULLDISC

Show all 18 references

www.novell.com/linux/security/advisories/2005_24_sr.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/17111Third Party AdvisoryX Refsource SECUNIA
www.gentoo.org/security/en/glsa/glsa-200510-08.xmlVendor AdvisoryX Refsource GENTOO
www.ubuntu.com/usn/usn-196-1Vendor AdvisoryX Refsource UBUNTU
secunia.com/advisories/17179Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/17162Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/17099/Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/22545VDB EntryX Refsource XF

Related vulnerabilities

CVE-2008-5246xinexine-lib5.69%17y ago26-11-2008 01:00Multiple heap-based buffer overflows in xine-lib before 1.1.15 allow remote attackers to execute arbitrary code via vectors that send ID3 data to the (1) id3v22_interp_frame and (2) id3v24_interp_frame functions in src/demuxers/id3.c. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.CVE-2008-5233xinexine-lib3.35%17y ago26-11-2008 01:00xine-lib 1.1.12, and other versions before 1.1.15, does not check for failure of malloc in circumstances including (1) the mymng_process_header function in demux_mng.c, (2) the open_mod_file function in demux_mod.c, and (3) frame_buffer allocation in the real_parse_audio_specific_data function in demux_real.c, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted media file.CVE-2008-5243xinexine-lib1.80%17y ago26-11-2008 01:00The real_parse_headers function in demux_real.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, relies on an untrusted input length value to "reindex into an allocated buffer," which allows remote attackers to cause a denial of service (crash) via a crafted value, probably an array index error.CVE-2008-5241xinexine-lib1.80%17y ago26-11-2008 01:00Integer underflow in demux_qt.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, allows remote attackers to cause a denial of service (crash) via a crafted media file that results in a small value of moov_atom_size in a compressed MOV (aka CMOV_ATOM).CVE-2008-5245xinexine-lib1.75%17y ago26-11-2008 01:00xine-lib before 1.1.15 performs V4L video frame preallocation before ascertaining the required length, which has unknown impact and attack vectors, possibly related to a buffer overflow in the open_video_capture_device function in src/input/input_v4l.c.CVE-2008-5240xinexine-lib4.19%17y ago26-11-2008 01:00xine-lib 1.1.12, and other 1.1.15 and earlier versions, relies on an untrusted input value to determine the memory allocation and does not check the result for (1) the MATROSKA_ID_TR_CODECPRIVATE track entry element processed by demux_matroska.c; and (2) PROP_TAG, (3) MDPR_TAG, and (4) CONT_TAG chunks processed by the real_parse_headers function in demux_real.c; which allows remote attackers to cause a denial of service (NULL pointer dereference and crash) or possibly execute arbitrary code via a crafted value.

All vulnerabilities inxine-lib

CVE-2005-2967: xine xine-lib

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References