Skip to Content.
Sympa Menu

sm-security - [SM-Security] SECURITY UPDATE for xine (xine security announcement)

sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

Chronological Thread  
  • From: Thomas Houssin <thomas.houssin AT gmail.com>
  • To: sm-security AT lists.ibiblio.org
  • Subject: [SM-Security] SECURITY UPDATE for xine (xine security announcement)
  • Date: Thu, 28 Apr 2005 04:09:36 +0200

Hi all,

These are extracts from xine security announcement ; complete
announcement on http://xinehq.de/index.php/security/XSA-2004-8.
Only stable was vulnerable, now updated to 1.0.1 to fix that.

Announcement-ID: XSA-2004-8

Summary:
By a user receiving data from a malicious network streaming server, an
attacker can overrun a heap buffer, which can, on some systems, lead to
or help in executing attacker-chosen malicious code with the permissions
of the user running a xine-lib based media application.

Severity:
This is difficult to exploit remotely, because the indirection involved
requires precision and knowledge of the target machine: The heap
overflow needs to alter heap management information in a way so that a
return adress on the stack is modified. This adress must lead to some
malicious code to be executed, which needs to be injected somehow.
The involved xine plugin is part of the standard xine installation, so
we consider this problem to be moderately severe.

Affected versions:
All 0.9 releases starting with and including 0.9.9
All 1-alpha releases.
All 1-beta releases.
All 1-rc releases.
The 1.0 release.

Unaffected versions:
All releases older than 0.9.9.
1.0.1 or newer.


--
Thomas Houssin

Security Team Lead : Source Mage GNU/Linux http://www.sourcemage.org
Key fingerprint = 3CB8 3FC4 840D B272 E623 BCB8 54DB F4E3 4240 4C36
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x42404C36

Attachment: signature.asc
Description: OpenPGP digital signature



  • [SM-Security] SECURITY UPDATE for xine (xine security announcement), Thomas Houssin, 04/27/2005

Archive powered by MHonArc 2.6.24.

Top of Page