Description
xine-lib before 1.1.15 performs V4L video frame preallocation before ascertaining the required length, which has unknown impact and attack vectors, possibly related to a buffer overflow in the open_video_capture_device function in src/input/input_v4l.c.
References
- 1020703 vdb-entry
- SUSE-SR:2009:004 vendor-advisory
- 31502 third-party-advisory
- ADV-2008-2382 vdb-entry
- MDVSA-2009:020 vendor-advisory
- 30698 vdb-entry
- xinelib-openvideocapturedevice-bo(44470) vdb-entry
- http://sourceforge.net/project/shownotes.php?release_id=619869