Description
xine-lib before 1.1.15 allows remote attackers to cause a denial of service (crash) via a crafted OGG file, as demonstrated by playing lol-ffplay.ogg with xine.
References
- xine-ogg-dos(44040) vdb-entry
- [oss-security] 20080713 CVE requests: crashers by zzuf mailing-list
- 1020703 vdb-entry
- 30699 vdb-entry
- 31827 third-party-advisory
- FEDORA-2008-7572 vendor-advisory
- SUSE-SR:2009:004 vendor-advisory
- ADV-2008-2382 vdb-entry
- MDVSA-2009:020 vendor-advisory
- FEDORA-2008-7512 vendor-advisory
- http://sourceforge.net/project/shownotes.php?release_id=619869