CVE-2008-0073
- State
- Published
- Severity
- Not scored
- Published
- Mar 24, 2008
- Updated
- Aug 7, 2024
- Reserved
- Jan 3, 2008
Description
Array index error in the sdpplin_parse function in input/libreal/sdpplin.c in xine-lib 1.1.10.1 allows remote RTSP servers to execute arbitrary code via a large streamid SDP parameter.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- http://secunia.com/secunia_research/2008-10/
- DSA-1543vendor-advisory
- GLSA-200808-01vendor-advisory
- SSA:2008-089-03vendor-advisory
- 28312vdb-entry
- xinelib-sdpplinparse-bo(41339)vdb-entry
- http://www.videolan.org/security/sa0803.php
- FEDORA-2008-2945vendor-advisory
- SUSE-SR:2008:012vendor-advisory
- 29392third-party-advisory
- FEDORA-2008-2569vendor-advisory
- http://sourceforge.net/project/shownotes.php?release_id=585488&group_id=9655
- 28694third-party-advisory
- 29740third-party-advisory
- GLSA-200804-25vendor-advisory
- 31393third-party-advisory
- SUSE-SR:2008:007vendor-advisory
- http://xinehq.de/index.php/news
- 29601third-party-advisory
- MDVSA-2008:178vendor-advisory
- http://wiki.videolan.org/Changelog/0.8.6f
- ADV-2008-0923vdb-entry
- 29800third-party-advisory
- MDVSA-2008:219vendor-advisory
- 29766third-party-advisory
- 1019682vdb-entry
- 29503third-party-advisory
- 29472third-party-advisory
- DSA-1536vendor-advisory
- 29578third-party-advisory
- ADV-2008-0985vdb-entry
- 31372third-party-advisory
- USN-635-1vendor-advisory
- 30581third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.