Description
Array index error in the sdpplin_parse function in input/libreal/sdpplin.c in xine-lib 1.1.10.1 allows remote RTSP servers to execute arbitrary code via a large streamid SDP parameter.
Published: 2008-03-24
Score: 6.8 Medium
EPSS: 1.8% Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DSA Debian DSA DSA-1536-1 New libxine packages fix several vulnerabilities
Debian DSA Debian DSA DSA-1543-1 New vlc packages fix several vulnerabilities
EUVD EUVD EUVD-2008-0086 Array index error in the sdpplin_parse function in input/libreal/sdpplin.c in xine-lib 1.1.10.1 allows remote RTSP servers to execute arbitrary code via a large streamid SDP parameter.
Ubuntu USN Ubuntu USN USN-635-1 xine-lib vulnerabilities
References
Link Providers
http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00008.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html cve-icon cve-icon
http://secunia.com/advisories/28694 cve-icon cve-icon
http://secunia.com/advisories/29392 cve-icon cve-icon
http://secunia.com/advisories/29472 cve-icon cve-icon
http://secunia.com/advisories/29503 cve-icon cve-icon
http://secunia.com/advisories/29578 cve-icon cve-icon
http://secunia.com/advisories/29601 cve-icon cve-icon
http://secunia.com/advisories/29740 cve-icon cve-icon
http://secunia.com/advisories/29766 cve-icon cve-icon
http://secunia.com/advisories/29800 cve-icon cve-icon
http://secunia.com/advisories/30581 cve-icon cve-icon
http://secunia.com/advisories/31372 cve-icon cve-icon
http://secunia.com/advisories/31393 cve-icon cve-icon
http://secunia.com/secunia_research/2008-10/ cve-icon cve-icon
http://security.gentoo.org/glsa/glsa-200804-25.xml cve-icon cve-icon
http://security.gentoo.org/glsa/glsa-200808-01.xml cve-icon cve-icon
http://sourceforge.net/project/shownotes.php?release_id=585488&group_id=9655 cve-icon cve-icon
http://wiki.videolan.org/Changelog/0.8.6f cve-icon cve-icon
http://www.debian.org/security/2008/dsa-1536 cve-icon cve-icon
http://www.debian.org/security/2008/dsa-1543 cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDVSA-2008:178 cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDVSA-2008:219 cve-icon cve-icon
http://www.securityfocus.com/bid/28312 cve-icon cve-icon
http://www.securitytracker.com/id?1019682 cve-icon cve-icon
http://www.slackware.org/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.392408 cve-icon cve-icon
http://www.ubuntu.com/usn/usn-635-1 cve-icon cve-icon
http://www.videolan.org/security/sa0803.php cve-icon cve-icon
http://www.vupen.com/english/advisories/2008/0923 cve-icon cve-icon
http://www.vupen.com/english/advisories/2008/0985 cve-icon cve-icon
http://xinehq.de/index.php/news cve-icon cve-icon
https://exchange.xforce.ibmcloud.com/vulnerabilities/41339 cve-icon cve-icon
https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00143.html cve-icon cve-icon
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00456.html cve-icon cve-icon
History

No history.

Subscriptions

Redhat Fedora
Xine Xine-lib
cve-icon MITRE

Status: PUBLISHED

Assigner: flexera

Published:

Updated: 2024-08-07T07:32:23.803Z

Reserved: 2008-01-03T00:00:00.000Z

Link: CVE-2008-0073

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2008-03-24T22:44:00.000

Modified: 2026-04-23T00:35:47.467

Link: CVE-2008-0073

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses