vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2008-1110

N/A
Published: February 29, 2008 at 07:00 PM UTC
Updated: June 16, 2026 at 10:51 PM UTC
2 products affected across 1 vendorXine LibXine Plugin

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 10%

Description

Buffer overflow in demuxers/demux_asf.c (aka the ASF demuxer) in the xineplug_dmx_asf.so plugin in xine-lib before 1.1.10 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a crafted ASF header. NOTE: this issue leads to a crash when an attack uses the CVE-2006-1664 exploit code, but it is different from CVE-2006-1664.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Xine Lib· Xine
95%
v ≤ 1.1.9
Xine Plugin· Xine
95%
v ≤ 1.1.9

References (12)

x_refsource_CONFIRM
Source: [email protected]
http://bugs.gentoo.org/show_bug.cgi?id=208100
x_refsource_CONFIRM
Source: [email protected]
http://hg.debian.org/hg/xine-lib/xine-lib?cmd=changeset%3Bnode=fb6d089b520dca199ef16a046da28c50c984c2d2%3Bstyle=gitweb
Third Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/29141
Third Party Advisoryx_refsource_SECUNIA
Source: [email protected]
http://secunia.com/advisories/31393
Vendor Advisoryx_refsource_GENTOO
Source: [email protected]
http://security.gentoo.org/glsa/glsa-200802-12.xml
x_refsource_CONFIRMPatch
Source: [email protected]
http://sourceforge.net/project/shownotes.php?group_id=9655&release_id=571608
Vendor Advisoryx_refsource_MANDRIVA
Source: [email protected]
http://www.mandriva.com/security/advisories?name=MDVSA-2008:178
Vendor Advisoryx_refsource_UBUNTU
Source: [email protected]
http://www.ubuntu.com/usn/usn-635-1

CVSS

6.8MEDIUM[email protected]
Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
PARTIAL
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-119

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card