diff options
| author | Matthias Hopf <mhopf@suse.de> | 2009-01-04 17:21:46 +0000 |
|---|---|---|
| committer | Matthias Hopf <mhopf@suse.de> | 2009-01-04 17:21:46 +0000 |
| commit | de3b12bc7488ca43834f2840619744a9ec2c5b16 (patch) | |
| tree | ddf1aefd735fa835ba9307dcdd030f51c72c42b5 /m4 | |
| parent | ba5f2ab8d7209f3971ecf22ea3bc5ee43a692b5c (diff) | |
| download | xine-lib-de3b12bc7488ca43834f2840619744a9ec2c5b16.tar.gz xine-lib-de3b12bc7488ca43834f2840619744a9ec2c5b16.tar.bz2 | |
Fix for CVE-2008-5243.
The real_parse_headers function in demux_real.c in xine-lib 1.1.12,
and other 1.1.15 and earlier versions, relies on an untrusted input
length value to "reindex into an allocated buffer," which allows
remote attackers to cause a denial of service (crash) via a crafted
value, probably an array index error.
Diffstat (limited to 'm4')
0 files changed, 0 insertions, 0 deletions