CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-5238

Integer overflow in the real_parse_mdpr function in demux_real.c in xine-lib 1.1.12, and other versions before 1.1.15, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted stream_name_size field.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.032

EPSS Ranking 86.3%

CVSS Severity

CVSS v2 Score 7.1

References

Products affected by CVE-2008-5238

Xine » Xine » Version: Any

cpe:2.3:a:xine:xine:*
Xine » Xine » Version: 0.9.13

cpe:2.3:a:xine:xine:0.9.13
Xine » Xine » Version: 1

cpe:2.3:a:xine:xine:1
Xine » Xine » Version: 1.0

cpe:2.3:a:xine:xine:1.0
Xine » Xine » Version: 1.0.1

cpe:2.3:a:xine:xine:1.0.1
Xine » Xine » Version: 1.0.2

cpe:2.3:a:xine:xine:1.0.2
Xine » Xine » Version: 1.0.3a

cpe:2.3:a:xine:xine:1.0.3a
Xine » Xine » Version: 1.1.0

cpe:2.3:a:xine:xine:1.1.0
Xine » Xine » Version: 1.1.1

cpe:2.3:a:xine:xine:1.1.1
Xine » Xine » Version: 1.1.10.1

cpe:2.3:a:xine:xine:1.1.10.1
Xine » Xine » Version: 1.1.11

cpe:2.3:a:xine:xine:1.1.11
Xine » Xine » Version: 1.1.11.1

cpe:2.3:a:xine:xine:1.1.11.1
Xine » Xine » Version: 1.1.2

cpe:2.3:a:xine:xine:1.1.2
Xine » Xine » Version: 1.1.3

cpe:2.3:a:xine:xine:1.1.3
Xine » Xine » Version: 1.1.4

cpe:2.3:a:xine:xine:1.1.4

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-5238

Products

Pricing

Contact Us