Security bugs are reported here via bugzilla

[Thomas Houssin <thomas.houssin AT gmail.com>]

Hi all,

These are extracts from xine security announcement ; complete
announcement on http://xinehq.de/index.php/security/XSA-2004-8.
Only stable was vulnerable, now updated to 1.0.1 to fix that.

Announcement-ID: XSA-2004-8

Summary:
By a user receiving data from a malicious network streaming server, an
attacker can overrun a heap buffer, which can, on some systems, lead to
or help in executing attacker-chosen malicious code with the permissions
of the user running a xine-lib based media application.

Severity:
This is difficult to exploit remotely, because the indirection involved
requires precision and knowledge of the target machine: The heap
overflow needs to alter heap management information in a way so that a
return adress on the stack is modified. This adress must lead to some
malicious code to be executed, which needs to be injected somehow.
The involved xine plugin is part of the standard xine installation, so
we consider this problem to be moderately severe.

Affected versions:
All 0.9 releases starting with and including 0.9.9
All 1-alpha releases.
All 1-beta releases.
All 1-rc releases.
The 1.0 release.

Unaffected versions:
All releases older than 0.9.9.
1.0.1 or newer.


-- 
Thomas Houssin

Security Team Lead : Source Mage GNU/Linux http://www.sourcemage.org
Key fingerprint = 3CB8 3FC4 840D B272 E623  BCB8 54DB F4E3 4240 4C36
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x42404C36

Attachment: signature.asc
Description: OpenPGP digital signature