CVE

Id
31227  
CVE No.
CVE-2008-1110  
Status
Candidate  
Description
Buffer overflow in demuxers/demux_asf.c (aka the ASF demuxer) in the xineplug_dmx_asf.so plugin in xine-lib before 1.1.10 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a crafted ASF header. NOTE: this issue leads to a crash when an attack uses the CVE-2006-1664 exploit code, but it is different from CVE-2006-1664.  
Phase
Assigned (20080229)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
333327 31227 CVE-2008-1110 MILW0RM:1641  View
333328 31227 CVE-2008-1110 URL:http://www.milw0rm.com/exploits/1641  View
333329 31227 CVE-2008-1110 CONFIRM:http://bugs.gentoo.org/show_bug.cgi?id=208100  View
333330 31227 CVE-2008-1110 CONFIRM:http://hg.debian.org/hg/xine-lib/xine-lib?cmd=changeset;node=fb6d089b520dca199ef16a046da28c50c984c2d2;style=gitweb  View
333331 31227 CVE-2008-1110 CONFIRM:http://sourceforge.net/project/shownotes.php?group_id=9655&release_id=571608  View
333332 31227 CVE-2008-1110 CONFIRM:http://xinehq.de/index.php/news  View
333333 31227 CVE-2008-1110 CONFIRM:http://xinehq.de/index.php/security  View
333334 31227 CVE-2008-1110 GENTOO:GLSA-200802-12  View
333335 31227 CVE-2008-1110 URL:http://security.gentoo.org/glsa/glsa-200802-12.xml  View
333336 31227 CVE-2008-1110 MANDRIVA:MDVSA-2008:178  View
333337 31227 CVE-2008-1110 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2008:178  View
333338 31227 CVE-2008-1110 UBUNTU:USN-635-1  View
333339 31227 CVE-2008-1110 URL:http://www.ubuntu.com/usn/usn-635-1  View
333340 31227 CVE-2008-1110 SECUNIA:29141  View
333341 31227 CVE-2008-1110 URL:http://secunia.com/advisories/29141  View
333342 31227 CVE-2008-1110 SECUNIA:31393  View
333343 31227 CVE-2008-1110 URL:http://secunia.com/advisories/31393  View
333344 31227 CVE-2008-1110 XF:xinelib-demuxasf-bo(41019)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51335 JVNDB-2008-006645 Vocera Communications Wireless Handset におけるハッシュ化されたパスワードを盗まれる脆弱性 Vocera Communications Wireless Handset は、Protected Extensible Authentication Protocol (PEAP) を使用する場合に、サーバ証明書を検証しないため、ハッシュ化されたパスワードを盗まれる、および中間者攻撃 (man-in-the-middle attack) を実行される脆弱性が存在します。 CVE-2008-1114 31227 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006645.html  View