CVE-2008-0073
Fixed in a distro release EPSS 9%
Array index error in the sdpplin_parse function in input/libreal/sdpplin.c in xine-lib 1.1.10.1 allows remote RTSP servers to execute arbitrary code via a large streamid SDP parameter.
Products: xine-lib
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | vlc | 0.8.6.e-2 |
| Debian 13 | vlc | 0.8.6.e-2 |
| Debian 14 | vlc | 0.8.6.e-2 |
| Debian 3.1 | xine-lib | 1.0.1-1sarge7 |
| Debian 4.0 | vlc | 0.8.6-svn20061012.debian-5.1+etch2 |
| Debian 4.0 | xine-lib | 1.1.2+dfsg-6 |
| Debian 5.0 | vlc | 0.8.6.c-6+lenny3 |
| Debian 5.0 | xine-lib | 1.1.10.1-2+lenny2 |