Array index error in the sdpplin_parse function in input/libreal/sdpplin.c in xine-lib 1.1.10.1 allows remote RTSP servers to execute arbit…

Exploit prediction (EPSS)

9.25% probability of exploitation in the next 30 days, higher than 95% of all scored CVEs.

Exploits and detections

• EDB-5498 Kantaris 0.3.4 - SSA Subtitle Local Buffer Overflow · local · 2008-04-25

CVSS scores

Classification

Weakness

• CWE-189 Numeric Errors

References

• secunia.com /secunia_research/2008-10/ · x_refsource_MISC, x_transferred
• debian.org /security/2008/dsa-1543 · vendor-advisory, x_refsource_DEBIAN, x_transferred
• security.gentoo.org /glsa/glsa-200808-01.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
• slackware.org /security/viewer.php?l=slackware-security&y=2008&m=slackware-security.392408 · vendor-advisory, x_refsource_SLACKWARE, x_transferred
• securityfocus.com /bid/28312 · vdb-entry, x_refsource_BID, x_transferred
• exchange.xforce.ibmcloud.com /vulnerabilities/41339 · vdb-entry, x_refsource_XF, x_transferred
• videolan.org /security/sa0803.php · x_refsource_CONFIRM, x_transferred
• redhat.com /archives/fedora-package-announce/2008-April/msg00143.html · vendor-advisory, x_refsource_FEDORA, x_transferred
• lists.opensuse.org /opensuse-security-announce/2008-06/msg00001.html · vendor-advisory, x_refsource_SUSE, x_transferred
• secunia.com /advisories/29392 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• redhat.com /archives/fedora-package-announce/2008-March/msg00456.html · vendor-advisory, x_refsource_FEDORA, x_transferred
• sourceforge.net /project/shownotes.php?release_id=585488&group_id=9655 · x_refsource_CONFIRM, x_transferred
• secunia.com /advisories/28694 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• secunia.com /advisories/29740 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• security.gentoo.org /glsa/glsa-200804-25.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
• secunia.com /advisories/31393 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• lists.opensuse.org /opensuse-security-announce/2008-03/msg00008.html · vendor-advisory, x_refsource_SUSE, x_transferred
• xinehq.de /index.php/news · x_refsource_CONFIRM, x_transferred
• secunia.com /advisories/29601 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• mandriva.com /security/advisories?name=MDVSA-2008:178 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
• wiki.videolan.org /Changelog/0.8.6f · x_refsource_CONFIRM, x_transferred
• vupen.com /english/advisories/2008/0923 · vdb-entry, x_refsource_VUPEN, x_transferred
• secunia.com /advisories/29800 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• mandriva.com /security/advisories?name=MDVSA-2008:219 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
• secunia.com /advisories/29766 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• securitytracker.com /id?1019682 · vdb-entry, x_refsource_SECTRACK, x_transferred
• secunia.com /advisories/29503 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• secunia.com /advisories/29472 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• debian.org /security/2008/dsa-1536 · vendor-advisory, x_refsource_DEBIAN, x_transferred
• secunia.com /advisories/29578 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• vupen.com /english/advisories/2008/0985 · vdb-entry, x_refsource_VUPEN, x_transferred
• secunia.com /advisories/31372 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• ubuntu.com /usn/usn-635-1 · vendor-advisory, x_refsource_UBUNTU, x_transferred
• secunia.com /advisories/30581 · third-party-advisory, x_refsource_SECUNIA, x_transferred

Sources

• CVE List: CVE-2008-0073
• NVD: CVE-2008-0073

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.