NVD

Id
5031  
Name
CVE-2008-5247  
Description
The real_parse_audio_specific_data function in demux_real.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, uses an untrusted height (aka codec_data_length) value as a divisor, which allow remote attackers to cause a denial of service (divide-by-zero error and crash) via a zero value.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-03  
Published
2008-11-25  
Modified Date
2009-08-19  
Seq
2008-5247  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
31481 5031 CVE-2008-5247 SUSE-SR:2009:004  View
31482 5031 CVE-2008-5247 4648  View
31483 5031 CVE-2008-5247 http://www.ocert.org/analysis/2008-008/analysis.txt  View
31484 5031 CVE-2008-5247 20080822 [oCERT-2008-008] multiple heap overflows in xine-lib  View
31485 5031 CVE-2008-5247 30797  View
31486 5031 CVE-2008-5247 FEDORA-2008-7572  View
31487 5031 CVE-2008-5247 FEDORA-2008-7512  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51183 JVNDB-2008-006493 xine-lib の demux_real.c におけるサービス運用妨害 (DoS) の脆弱性 xine-lib の demux_real.c の real_parse_audio_specific_data 関数は、約数として不正な高さ値を使用するため、サービス運用妨害 (ゼロ除算エラーおよびクラッシュ) 状態となる脆弱性が存在します。 CVE-2008-5247 35360 CVE-2008-5247 5031 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006493.html 2008-09-10 2012-12-20 View