| Package: | xine-lib |
| Date: | 2008-05-05 |
| Vulnerable version: | 1.1.11-1kalgan2 |
| Unaffected version: | 1.1.11-1kalgan3 |
| Bug tracker entry: | http://bugs.frugalware.org/task/3027 |
| CVEs: | http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1878 |
| Description: | Guido Landi has discovered a vulnerability in xine-lib, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to a boundary error within the "demux_nsf_send_chunk()" function in src/demuxers/demux_nsf.c. This can be exploited to cause a stack-based buffer overflow via an overly long NSF title. |
