Buffer overflow in the open_aiff_file function in demux_aiff.c for xine-lib (libxine) 1-rc7 allows remote attackers to execute arbitrary code via a crafted AIFF file.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Xine-lib | Xine | 1_rc7 (including) | 1_rc7 (including) |
| Xine-extracodecs | Ubuntu | dapper | * |
| Xine-extracodecs | Ubuntu | edgy | * |
| Xine-extracodecs | Ubuntu | feisty | * |
| Xine-lib | Ubuntu | dapper | * |
| Xine-lib | Ubuntu | devel | * |
| Xine-lib | Ubuntu | edgy | * |
| Xine-lib | Ubuntu | feisty | * |
References
- http://tigger.uic.edu/~jlongs2/holes/xine-lib.txt
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:011
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18611
- http://tigger.uic.edu/~jlongs2/holes/xine-lib.txt
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:011
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18611