CVE-2008-0073: xine xine-lib Numeric Errors

EPSS trend

Probability

9.25%

Chance of exploitation in the next 30 days

Percentile

95%

Versus all other CVEs

30-day change

No change 0.00 pp

From 9.25% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

1 found

exploit-databaselocalwindowsVerified
Kantaris 0.3.4 - SSA Subtitle Local Buffer Overflow
Maturity: weaponized

References

35 links

secunia.com/secunia_research/2008-10/X Refsource MISCVendor Advisory
www.debian.org/security/2008/dsa-1543Vendor AdvisoryX Refsource DEBIAN
security.gentoo.org/glsa/glsa-200808-01.xmlVendor AdvisoryX Refsource GENTOO
www.slackware.org/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.392408Vendor AdvisoryX Refsource SLACKWARE
www.securityfocus.com/bid/28312VDB EntryX Refsource BID
exchange.xforce.ibmcloud.com/vulnerabilities/41339VDB EntryX Refsource XF
www.videolan.org/security/sa0803.phpX Refsource CONFIRM
www.redhat.com/archives/fedora-package-announce/2008-April/msg00143.htmlVendor AdvisoryX Refsource FEDORA
lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/29392Third Party AdvisoryX Refsource SECUNIA

Show all 35 references

www.redhat.com/archives/fedora-package-announce/2008-March/msg00456.htmlVendor AdvisoryX Refsource FEDORA
sourceforge.net/project/shownotes.php?release_id=585488&group_id=9655X Refsource CONFIRMPatch
secunia.com/advisories/28694Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/29740Third Party AdvisoryX Refsource SECUNIA
security.gentoo.org/glsa/glsa-200804-25.xmlVendor AdvisoryX Refsource GENTOO
secunia.com/advisories/31393Third Party AdvisoryX Refsource SECUNIA
lists.opensuse.org/opensuse-security-announce/2008-03/msg00008.htmlVendor AdvisoryX Refsource SUSE
xinehq.de/index.php/newsX Refsource CONFIRMPatch
secunia.com/advisories/29601Third Party AdvisoryX Refsource SECUNIA
www.mandriva.com/security/advisories?name=MDVSA-2008:178Vendor AdvisoryX Refsource MANDRIVA
wiki.videolan.org/Changelog/0.8.6fX Refsource CONFIRM
www.vupen.com/english/advisories/2008/0923VDB EntryX Refsource VUPEN
secunia.com/advisories/29800Third Party AdvisoryX Refsource SECUNIA
www.mandriva.com/security/advisories?name=MDVSA-2008:219Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/29766Third Party AdvisoryX Refsource SECUNIA
www.securitytracker.com/id?1019682VDB EntryX Refsource SECTRACK
secunia.com/advisories/29503Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/29472Third Party AdvisoryX Refsource SECUNIA
www.debian.org/security/2008/dsa-1536Vendor AdvisoryX Refsource DEBIAN
secunia.com/advisories/29578Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2008/0985VDB EntryX Refsource VUPEN
secunia.com/advisories/31372Third Party AdvisoryX Refsource SECUNIA
www.ubuntu.com/usn/usn-635-1Vendor AdvisoryX Refsource UBUNTU
secunia.com/advisories/30581Third Party AdvisoryX Refsource SECUNIA
security-tracker.debian.org/tracker/CVE-2008-0073Advisory

Related vulnerabilities

RoutineCVE-2008-5248xine · xine-lib17y agoxine xine-libxine-lib before 1.1.15 allows remote attackers to cause a denial of service (crash) via "MP3 files with metadata consisting only of separators."CVSS4.3MediumEPSS1.21%RoutineCVE-2008-5247xine · xine-lib17y agoxine xine-libThe real_parse_audio_specific_data function in demux_real.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, uses an untrusted height (aka codec_data_length) value as a divisor, which allow remote attackers to cause a denial of service (divide-by-zero error and crash) via a zero value.CVSS4.3MediumEPSS1.51%RoutineCVE-2008-5246xine · xine-lib17y agoxine xine-libMultiple heap-based buffer overflows in xine-lib before 1.1.15 allow remote attackers to execute arbitrary code via vectors that send ID3 data to the (1) id3v22_interp_frame and (2) id3v24_interp_frame functions in src/demuxers/id3.c. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.CVSS9.3CriticalEPSS5.69%RoutineCVE-2008-5245xine · xine-lib17y agoxine xine-libxine-lib before 1.1.15 performs V4L video frame preallocation before ascertaining the required length, which has unknown impact and attack vectors, possibly related to a buffer overflow in the open_video_capture_device function in src/input/input_v4l.c.CVSS9.3CriticalEPSS1.75%RoutineCVE-2008-5244xine · xine-lib +2 more17y agoxine xine-libUnspecified vulnerability in xine-lib before 1.1.15 has unknown impact and attack vectors related to libfaad. NOTE: due to the lack of details, it is not clear whether this is an issue in xine-lib or in libfaad.CVSS10.0CriticalEPSS2.01%RoutineCVE-2008-5243xine · xine-lib17y agoxine xine-libThe real_parse_headers function in demux_real.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, relies on an untrusted input length value to "reindex into an allocated buffer," which allows remote attackers to cause a denial of service (crash) via a crafted value, probably an array index error.CVSS4.3MediumEPSS1.80%

All vulnerabilities inxine-lib

CVE-2008-0073: xine xine-lib Numeric Errors

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References