Approved changes feed: RSS · Atom
cpe:2.3:a:xine:xine-lib:0.99:*:*:*:*:*:*:*
part: a version: 0.99 update: *
| Vendor | Xine (5ea9c4e4-6359-5d9c-b16b-9d32d5302a26) |
|---|---|
| Product | Xine Lib (a2b58354-6dac-5cdc-801b-639b0dc09d0c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2008-3231 |
vulnerable | 2026-06-08 04:50:33.535604 |
Details available
xine-lib before 1.1.15 allows remote attackers to cause a denial of service (crash) via a crafted OGG file, as demonstrated by playing lol-ffplay.ogg with xine.
Published: 2008-07-18T16:00:00.000Z
Updated: 2024-08-07T09:28:41.820Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-1686 |
vulnerable | 2026-06-08 04:50:21.499104 |
Details available
Array index vulnerability in Speex 1.1.12 and earlier, as used in libfishsound 0.9.0 and earlier, including Illiminable DirectShow Filters and Annodex Plugins for Firefox, xine-lib before 1.1.12, and many other products, allows remote attackers to execute arbitrary code via a header structure containing a negative offset, which is used to dereference a function pointer.
Published: 2008-04-08T18:00:00.000Z
Updated: 2024-08-07T08:32:01.268Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1476 |
vulnerable | 2026-06-08 04:47:54.298540 |
Details available
Stack-based buffer overflow in the VideoCD (VCD) code in xine-lib 1-rc2 through 1-rc5, as derived from libcdio, allows attackers to execute arbitrary code via a VideoCD with an unterminated disk label.
Published: 2005-02-13T05:00:00.000Z
Updated: 2024-08-08T00:53:23.984Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1475 |
vulnerable | 2026-06-08 04:47:54.298012 |
Details available
Multiple stack-based buffer overflows in xine-lib 1-rc2 through 1-rc5 allow attackers to execute arbitrary code via (1) long VideoCD vcd:// MRLs or (2) long subtitle lines.
Published: 2005-02-13T05:00:00.000Z
Updated: 2024-08-08T00:53:23.950Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1188 |
vulnerable | 2026-06-08 04:47:53.301472 |
Details available
The pnm_get_chunk function in xine 0.99.2 and earlier, and other packages such as MPlayer that use the same code, does not properly verify that the chunk size is less than the PREAMBLE_SIZE, which causes a read operation with a negative length that leads to a buffer overflow via (1) RMF_TAG, (2) DATA_TAG, (3) PROP_TAG, (4) MDPR_TAG, and (5) CONT_TAG values, a different vulnerability than CVE-2004-1187.
Published: 2004-12-22T05:00:00.000Z
Updated: 2024-08-08T00:46:12.403Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1187 |
vulnerable | 2026-06-08 04:47:53.291357 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.