Description
Heap-based buffer overflow in the demux_real_send_chunk function in src/demuxers/demux_real.c in xine-lib before 1.1.15 allows remote attackers to execute arbitrary code via a crafted Real Media file. NOTE: some of these details are obtained from third party information.
References
- 1020703 vdb-entry
- SUSE-SR:2009:004 vendor-advisory
- 31502 third-party-advisory
- ADV-2008-2382 vdb-entry
- 30698 vdb-entry
- http://sourceforge.net/project/shownotes.php?release_id=619869