NVD

Id
48561  
Name
CVE-2009-1274  
Description
Integer overflow in the qt_error parse_trak_atom function in demuxers/demux_qt.c in xine-lib 1.1.16.2 and earlier allows remote attackers to execute arbitrary code via a Quicktime movie file with a large count value in an STTS atom, which triggers a heap-based buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2009-04-08  
Modified Date
2009-11-24  
Seq
2009-1274  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
244897 48561 CVE-2009-1274 http://bugs.xine-project.org/show_bug.cgi?id=224  View
244898 48561 CVE-2009-1274 SUSE-SR:2009:011  View
244899 48561 CVE-2009-1274 http://sourceforge.net/project/shownotes.php?group_id=9655&release_id=673233  View
244900 48561 CVE-2009-1274 MDVSA-2009:298  View
244901 48561 CVE-2009-1274 MDVSA-2009:299  View
244902 48561 CVE-2009-1274 20090404 [TKADV2009-005] xine-lib Quicktime STTS Atom Integer Overflow  View
244903 48561 CVE-2009-1274 34384  View
244904 48561 CVE-2009-1274 1021989  View
244905 48561 CVE-2009-1274 http://www.trapkit.de/advisories/TKADV2009-005.txt  View
244906 48561 CVE-2009-1274 ADV-2009-0937  View
244907 48561 CVE-2009-1274 xinelib-demuxqt-bo(49714)  View
244908 48561 CVE-2009-1274 FEDORA-2009-3428  View
244909 48561 CVE-2009-1274 FEDORA-2009-3433  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
44931 JVNDB-2009-005938 xine-lib の demuxers/demux_qt.c における整数オーバーフローの脆弱性 xine-lib の demuxers/demux_qt.c の qt_error parse_trak_atom 関数には、整数オーバーフローの脆弱性が存在します。 CVE-2009-1274 38705 CVE-2009-1274 48561 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005938.html 2009-04-08 2012-12-20 View