Login Request a demo
XI
Vendor
Xine
6 products with CVEs on record
59
CVEs
0
On KEV
0
New 30D
Products
XI
Xine-lib
Xine
–
38 CVEs0 on KEV0 new
XI
Xine
Xine
–
14 CVEs0 on KEV0 new
GX
Gxine
Xine
–
3 CVEs0 on KEV0 new
XI
Xine-ui
Xine
–
2 CVEs0 on KEV0 new
RM
Real Media Input Plugin
Xine
–
1 CVEs0 on KEV0 new
XI
Xine-plugin
Xine
–
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2009-1274
XI
Xine-lib
Xine
–
5%
Apr 8Integer overflow in the qt_error parse_trak_atom function in demuxers/demux_qt.c in xine-lib 1.1.16.2 and earlier allows remote attackers to execute arbitrary code via a Quicktime…
CVE-2009-0698
XI
Xine-lib
Xine
–
4%
Feb 23Integer overflow in the 4xm demuxer (demuxers/demux_4xm.c) in xine-lib 1.1.16.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code…
CVE-2008-5248
XI
Xine-lib
Xine
–
1%
Nov 26xine-lib before 1.1.15 allows remote attackers to cause a denial of service (crash) via "MP3 files with metadata consisting only of separators."
CVE-2008-5247
XI
Xine-lib
Xine
–
2%
Nov 26The real_parse_audio_specific_data function in demux_real.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, uses an untrusted height (aka codec_data_length) value as a…
CVE-2008-5246
XI
Xine-lib
Xine
–
6%
Nov 26Multiple heap-based buffer overflows in xine-lib before 1.1.15 allow remote attackers to execute arbitrary code via vectors that send ID3 data to the (1) id3v22_interp_frame and…
CVE-2008-5245
XI
Xine-lib
Xine
–
2%
Nov 26xine-lib before 1.1.15 performs V4L video frame preallocation before ascertaining the required length, which has unknown impact and attack vectors, possibly related to a buffer…
CVE-2008-5244
XI
Xine-lib
Xine
–
2%
Nov 26Unspecified vulnerability in xine-lib before 1.1.15 has unknown impact and attack vectors related to libfaad
CVE-2008-5243
XI
Xine-lib
Xine
–
2%
Nov 26The real_parse_headers function in demux_real.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, relies on an untrusted input length value to "reindex into an allocated…
CVE-2008-5242
XI
Xine-lib
Xine
–
3%
Nov 26demux_qt.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, does not validate the count field before calling calloc for STSD_ATOM atom allocation, which allows remote…
CVE-2008-5241
XI
Xine-lib
Xine
–
2%
Nov 26Integer underflow in demux_qt.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, allows remote attackers to cause a denial of service (crash) via a crafted media file…
CVE-2008-5240
XI
Xine-lib
Xine
–
4%
Nov 26xine-lib 1.1.12, and other 1.1.15 and earlier versions, relies on an untrusted input value to determine the memory allocation and does not check the result for (1) the…
CVE-2008-5239
XI
Xine-lib
Xine
–
4%
Nov 26xine-lib 1.1.12, and other 1.1.15 and earlier versions, does not properly handle (a) negative and (b) zero values during unspecified read function calls in input_file.c,…
CVE-2008-5238
XI
Xine
Xine
–
4%
Nov 26Integer overflow in the real_parse_mdpr function in demux_real.c in xine-lib 1.1.12, and other versions before 1.1.15, allows remote attackers to cause a denial of service (crash)…
CVE-2008-5237
XI
Xine
Xine
–
6%
Nov 26Multiple integer overflows in xine-lib 1.1.12, and other 1.1.15 and earlier versions, allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary…
CVE-2008-5236
XI
Xine
Xine
–
6%
Nov 26Multiple heap-based buffer overflows in xine-lib 1.1.12, and other 1.1.15 and earlier versions, allow remote attackers to execute arbitrary code via vectors related to (1) a…
CVE-2008-5235
XI
Xine
Xine
–
5%
Nov 26Heap-based buffer overflow in the demux_real_send_chunk function in src/demuxers/demux_real.c in xine-lib before 1.1.15 allows remote attackers to execute arbitrary code via a…
CVE-2008-5234
XI
Xine-lib
Xine
–
6%
Nov 26Multiple heap-based buffer overflows in xine-lib 1.1.12, and other versions before 1.1.15, allow remote attackers to execute arbitrary code via vectors related to (1) a crafted…
CVE-2008-5233
XI
Xine-lib
Xine
–
3%
Nov 26xine-lib 1.1.12, and other versions before 1.1.15, does not check for failure of malloc in circumstances including (1) the mymng_process_header function in demux_mng.c, (2) the…
CVE-2008-3231
XI
Xine-lib
Xine
–
2%
Jul 18xine-lib before 1.1.15 allows remote attackers to cause a denial of service (crash) via a crafted OGG file, as demonstrated by playing lol-ffplay.ogg with xine
CVE-2008-1878
XI
Xine-lib
Xine
–
15%
Apr 17Stack-based buffer overflow in the demux_nsf_send_chunk function in src/demuxers/demux_nsf.c in xine-lib 1.1.12 and earlier allows remote attackers to cause a denial of service…
CVE-2008-1686
XI
Xine-lib
Xine
–
6%
Apr 8Array index vulnerability in Speex 1.1.12 and earlier, as used in libfishsound 0.9.0 and earlier, including Illiminable DirectShow Filters and Annodex Plugins for Firefox,…
CVE-2008-0073
XI
Xine-lib
Xine
–
9%
Mar 24Array index error in the sdpplin_parse function in input/libreal/sdpplin.c in xine-lib 1.1.10.1 allows remote RTSP servers to execute arbitrary code via a large streamid SDP…
CVE-2008-1482
XI
Xine-lib
Xine
–
10%
Mar 24Multiple integer overflows in xine-lib 1.1.11 and earlier allow remote attackers to trigger heap-based buffer overflows and possibly execute arbitrary code via (1) a crafted .FLV…
CVE-2008-1110
XI
Xine-lib
Xine
–
10%
Feb 29Buffer overflow in demuxers/demux_asf.c (aka the ASF demuxer) in the xineplug_dmx_asf.so plugin in xine-lib before 1.1.10 allows remote attackers to execute arbitrary code or…
CVE-2008-0486
XI
Xine-lib
Xine
–
5%
Feb 5Array index vulnerability in libmpdemux/demux_audio.c in MPlayer 1.0rc2 and SVN before r25917, and possibly earlier versions, as used in Xine-lib 1.1.10, might allow remote…
CVE-2008-0238
XI
Xine-lib
Xine
–
4%
Jan 11Multiple heap-based buffer overflows in the rmff_dump_cont function in input/libreal/rmff.c in xine-lib 1.1.9 allow remote attackers to execute arbitrary code via the SDP (1)…
CVE-2008-0225
XI
Xine-lib
Xine
–
15%
Jan 10Heap-based buffer overflow in the rmff_dump_cont function in input/libreal/rmff.c in xine-lib 1.1.9 and earlier allows remote attackers to execute arbitrary code via the SDP…
CVE-2007-0255
XI
Xine
Xine
–
4%
Jan 16XINE 0.99.4 allows user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a certain M3U file that contains a long…
CVE-2007-0254
XI
Xine-ui
Xine
–
4%
Jan 16Format string vulnerability in the errors_create_window function in errors.c in xine-ui allows attackers to execute arbitrary code via unknown vectors
CVE-2006-6172
RM
Real Media Input Plugin
Xine
–
6%
Nov 30Buffer overflow in the asmrp_eval function in the RealMedia RTSP stream handler (asmrp.c) for Real Media input plugin, as used in (1) xine/xine-lib, (2) MPlayer 1.0rc1 and…
CVE-2006-4799
XI
Xine-lib
Xine
–
3%
Sep 14Buffer overflow in ffmpeg for xine-lib before 1.1.2 might allow context-dependent attackers to execute arbitrary code via a crafted AVI file and "bad indexes", a different…
CVE-2006-2200
XI
Xine-lib
Xine
–
4%
Jun 28Stack-based buffer overflow in libmms, as used by (a) MiMMS 0.0.9 and (b) xine-lib 1.1.0 and earlier, allows remote attackers to cause a denial of service (application crash) and…
CVE-2006-2802
GX
Gxine
Xine
–
11%
Jun 3Buffer overflow in the HTTP Plugin (xineplug_inp_http.so) for xine-lib 1.1.1 allows remote attackers to cause a denial of service (application crash) via a long reply from an HTTP…
CVE-2006-2230
XI
Xine
Xine
–
7%
May 5Multiple format string vulnerabilities in xiTK (xitk/main.c) in xine 0.99.4 might allow attackers to cause a denial of service via format string specifiers in an MP3 filename…
CVE-2006-1905
XI
Xine
Xine
–
15%
Apr 20Multiple format string vulnerabilities in xiTK (xitk/main.c) in xine 0.99.3 allow remote attackers to execute arbitrary code via format string specifiers in a long filename on an…
CVE-2006-1664
XI
Xine-lib
Xine
–
15%
Apr 7Buffer overflow in xine_list_delete_current in libxine 1.14 and earlier, as distributed in xine-lib 1.1.1 and earlier, allows remote attackers to execute arbitrary code via a…
CVE-2005-2967
XI
Xine-lib
Xine
–
10%
Oct 14Format string vulnerability in input_cdda.c in xine-lib 1-beta through 1-beta 3, 1-rc, 1.0 through 1.0.2, and 1.1.1 allows remote servers to execute arbitrary code via format…
CVE-2005-1692
GX
Gxine
Xine
–
3%
May 24Format string vulnerability in gxine 0.4.1 through 0.4.4, and other versions down to 0.3, allows remote attackers to execute arbitrary code via a ram file with a URL whose…
CVE-2005-1195
XI
Xine-lib
Xine
–
4%
May 2Multiple heap-based buffer overflows in the code used to handle (1) MMS over TCP (MMST) streams or (2) RealMedia RTSP streams in xine-lib before 1.0, and other products that use…
CVE-2004-1034
GX
Gxine
Xine
–
6%
Mar 1Buffer overflow in the http_open function in Kaffeine before 0.5, whose code is also used in gxine before 0.3.3, allows remote attackers to cause a denial of service (application…
CVE-2004-1188
XI
Xine
Xine
–
2%
Jan 10The pnm_get_chunk function in xine 0.99.2 and earlier, and other packages such as MPlayer that use the same code, does not properly verify that the chunk size is less than the…
CVE-2004-1300
XI
Xine-lib
Xine
–
9%
Jan 10Buffer overflow in the open_aiff_file function in demux_aiff.c for xine-lib (libxine) 1-rc7 allows remote attackers to execute arbitrary code via a crafted AIFF file
CVE-2004-1187
XI
Xine
Xine
–
5%
Jan 10Heap-based buffer overflow in the pnm_get_chunk function for xine 0.99.2, and other packages such as MPlayer that use the same code, allows remote attackers to execute arbitrary…
CVE-2004-1455
XI
Xine-lib
Xine
–
4%
Dec 31Stack-based buffer overflow in Xine-lib-rc5 in xine-lib 1_rc5-r2 and earlier allows remote attackers to execute arbitrary code via crafted playlists that result in a long vcd://…
CVE-2004-1951
XI
Xine
Xine
–
8%
Dec 31xine 1.x alpha, 1.x beta, and 1.0rc through 1.0rc3a, and xine-ui 0.9.21 to 0.9.23 allows remote attackers to overwrite arbitrary files via the (1) audio.sun_audio_device or (2)…
CVE-2004-1476
XI
Xine
Xine
–
2%
Dec 31Stack-based buffer overflow in the VideoCD (VCD) code in xine-lib 1-rc2 through 1-rc5, as derived from libcdio, allows attackers to execute arbitrary code via a VideoCD with an…
CVE-2004-1475
XI
Xine
Xine
–
8%
Dec 31Multiple stack-based buffer overflows in xine-lib 1-rc2 through 1-rc5 allow attackers to execute arbitrary code via (1) long VideoCD vcd:// MRLs or (2) long subtitle lines
CVE-2004-1379
XI
Xine
Xine
–
4%
Sep 16Heap-based buffer overflow in the DVD subpicture decoder in xine xine-lib 1-rc5 and earlier allows remote attackers to execute arbitrary code via a (1) DVD or (2) MPEG subpicture…
CVE-2004-0433
XI
Xine-lib
Xine
–
5%
Aug 18Multiple buffer overflows in the Real-Time Streaming Protocol (RTSP) client for (1) MPlayer before 1.0pre4 and (2) xine lib (xine-lib) before 1-rc4, when playing Real RTSP…
CVE-2004-0372
XI
Xine
Xine
–
0%
Apr 15xine allows local users to overwrite arbitrary files via a symlink attack on a bug report email that is generated by the (1) xine-bugreport or (2) xine-check scripts