Detections
Analytics
Xine-lib < 1.0 RC6a Heap and Stack Overflows
medium Nessus Network Monitor Plugin ID 2304
Synopsis
The remote host is vulnerable to multiple buffer overflows.Description
The remote host is using a software linked again xine-lib, an open-source multimedia library. It is reported that versions up to 1.0 rc6a are vulnerable to multiple overflows in the DVD, subtitles and Video-CD modules. An attacker may craft a malicious multimedia file that may execute arbitrary code on the remote host if played with a xine-lib based software.Solution
Upgrade to Xine-lib 1.0 RC6a or higher.Plugin Details
Severity: Medium
ID: 2304
Family: Web Clients
Published: 9/21/2004
Updated: 3/6/2019
Risk Information
VPR
Risk Factor: Medium
Score: 6.1
CVSS v2
Risk Factor: Medium
Base Score: 5.1
Temporal Score: 3.8
Vector: CVSS2#AV:N/AC:H/Au:N/C:P/I:P/A:P
CVSS v3
Risk Factor: Medium
Base Score: 5.6
Temporal Score: 4.9
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:xine:xine-lib