CVE-2008-5244: xine xine-lib
CVSS: 10.0v2.0HighModified
AliasesDEBIAN-CVE-2008-5244
Published 26-11-2008Last modified 07-08-2024
Vulnerability summary
CVE-2008-5244 is a high (CVSS 10.0) vulnerability in xine xine-lib. EPSS estimates a 2.01% chance of exploitation in the next 30 days, higher than 80.6% of scored vulnerabilities.
CVSS score
10.0/10
010
High · v2.0 (NVD)EPSS score
2.01%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 26-11-2008PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Unspecified vulnerability in xine-lib before 1.1.15 has unknown impact and attack vectors related to libfaad. NOTE: due to the lack of details, it is not clear whether this is an issue in xine-lib or in libfaad.
CVSS metrics
1 score · 1 source · 1 versionHigh 10.0Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:C/I:C/A:CSourcesSingle source
EPSS trend
Probability
2.01%
Chance of exploitation in the next 30 days
Percentile
81%
Versus all other CVEs
30-day change
0.00 pp
From 2.01% on 21-09-2026
21-09-202621-10-2026
EPSS score2.01%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Debian2 products
- faad2< 2.6.1-1
- mplayer< 1.0~rc2-20
Xine1 product
- xine-lib≤ 1.1.15 | 0.9.13 | 1:rc0a | 1:rc1 | 1:rc2 | 1:rc3 | 1:rc3a | 1:rc3b | 1:rc3c | 1:rc4 | 1:rc4a | 1:rc5 | 1:rc6a | 1:rc7 | 1:rc8 | 1.0 | 1.0.1 | 1.0.2 | 1.0.3a | 1.1.0 | 1.1.1 | 1.1.2 | 1.1.3 | 1.1.4 | 1.1.5 | 1.1.6 | 1.1.7 | 1.1.8 | 1.1.9 | 1.1.9.1 | 1.1.10 | 1.1.10.1 | 1.1.11 | 1.1.11.1 | 1.1.12 | 1.1.13 | 1.1.14 | 1_beta1 | 1_beta2 | 1_beta3 | 1_beta4 | 1_beta5 | 1_beta6 | 1_beta7 | 1_beta8 | 1_beta9 | 1_beta10 | 1_beta11 | 1_beta12
2 vendors · 3 products
References
4 links- sourceforge.net/project/shownotes.php?release_id=619869X Refsource CONFIRM