xine-lib 'rmff_dump_cont()' Remote Heap Buffer Overflow Vulnerability

Bugtraq ID:	27198
Class:	Boundary Condition Error
CVE:	CVE-2008-0225
Remote:	Yes
Local:	No
Published:	Jan 09 2008 12:00AM
Updated:	Apr 13 2015 09:32PM
Credit:	Luigi Auriemma is credited with the discovery of this vulnerability.
Vulnerable:	xine xine-lib 1.1.9 xine xine-lib 1.1.4 xine xine-lib 1.1.3 xine xine-lib 1.1.2 xine xine-lib 1.1.1 xine xine-lib 1.1 xine xine-lib 1.0.2 xine xine-lib 1.0.1 xine xine-lib 1.0 xine xine-lib 1-rc8 xine xine-lib 1-rc7 xine xine-lib 1-rc6a xine xine-lib 1-rc6 xine xine-lib 1-rc5 xine xine-lib 1-rc4 xine xine-lib 1-rc3c xine xine-lib 1-rc3b xine xine-lib 1-rc3a xine xine-lib 1-rc3 xine xine-lib 1-rc2 xine xine-lib 1-rc1 xine xine-lib 1-rc0 xine xine-lib 1-beta9 xine xine-lib 1-beta8 xine xine-lib 1-beta7 xine xine-lib 1-beta6 xine xine-lib 1-beta5 xine xine-lib 1-beta4 xine xine-lib 1-beta3 xine xine-lib 1-beta2 xine xine-lib 1-beta12 xine xine-lib 1-beta11 xine xine-lib 1-beta10 xine xine-lib 1-beta1 xine xine-lib 1-alpha Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 7.10 sparc Ubuntu Ubuntu Linux 7.10 powerpc Ubuntu Ubuntu Linux 7.10 lpia Ubuntu Ubuntu Linux 7.10 i386 Ubuntu Ubuntu Linux 7.10 amd64 Ubuntu Ubuntu Linux 7.04 sparc Ubuntu Ubuntu Linux 7.04 powerpc Ubuntu Ubuntu Linux 7.04 i386 Ubuntu Ubuntu Linux 7.04 amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 SuSE SUSE Linux Enterprise Server 9 SP3 SuSE SUSE Linux Enterprise Server 9 SuSE SUSE Linux Enterprise Server 8 + Linux kernel 2.4.21 + Linux kernel 2.4.19 SuSE SUSE Linux Enterprise Server 10 SP1 SuSE SUSE Linux Enterprise Server 10 SuSE SUSE Linux Enterprise SDK 9 SuSE SUSE Linux Enterprise SDK 10.SP1 SuSE SUSE Linux Enterprise SDK 10 SuSE Suse Linux Enterprise Desktop 10 SP1 SuSE Suse Linux Enterprise Desktop 10 SuSE SUSE Linux Enterprise 10 SP1 DEBUGINFO SuSE Linux Desktop 10 SuSE Linux 10.1 x86-64 SuSE Linux 10.1 x86 SuSE Linux 10.1 ppc SuSE Linux 10.0 x86-64 SuSE Linux 10.0 x86 SuSE Linux 10.0 ppc S.u.S.E. UnitedLinux 1.0 S.u.S.E. SuSE Linux School Server for i386 S.u.S.E. SUSE LINUX Retail Solution 8.0 S.u.S.E. SuSE Linux Openexchange Server 4.0 S.u.S.E. SuSE Linux Open-Xchange 4.1 S.u.S.E. openSUSE 10.3 S.u.S.E. openSUSE 10.2 S.u.S.E. openSUSE 10.1 S.u.S.E. Open-Enterprise-Server 1 S.u.S.E. Open-Enterprise-Server 0 S.u.S.E. Novell Linux POS 9 S.u.S.E. Novell Linux Desktop SDK 9.0 S.u.S.E. Novell Linux Desktop 9.0 S.u.S.E. Linux Professional 10.0 OSS S.u.S.E. Linux Professional 10.0 S.u.S.E. Linux Professional 10.2 X86 64 S.u.S.E. Linux Professional 10.2 S.u.S.E. Linux Professional 10.1 S.u.S.E. Linux Personal 10.0 OSS S.u.S.E. Linux Personal 10.2 X86 64 S.u.S.E. Linux Personal 10.2 S.u.S.E. Linux Personal 10.1 Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 Mandriva Linux Mandrake 2007.1 x86_64 Mandriva Linux Mandrake 2007.1 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 Gentoo Linux Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0
Not Vulnerable:	xine xine-lib 1.1.9 .1

xine-lib 'rmff_dump_cont()' Remote Heap Buffer Overflow Vulnerability

The xine-lib library is prone to a remote heap-based buffer-overflow vulnerability. This issue occurs because the software fails to perform adequate boundary checks on user-supplied data.

An attacker can exploit this issue to execute arbitrary code with the privileges of the user running the affected application. Failed exploit attempts will result in a denial-of-service condition.

This issue affects xine-lib 1.1.9 and prior versions.

xine-lib 'rmff_dump_cont()' Remote Heap Buffer Overflow Vulnerability

An attacker can exploit this issue by enticing an unsuspecting victim to view a malicious data stream.

The following proof-of-concept SDP data is available:

a=Abstract:buffer;'QUFBQUFBQUFBQUFBQUFB...40000_of_QUFBQUFB's...FBQUFB'

When decoding 'QUFBQUFB', the portion will be decoded to 'AAAAAA'.

xine-lib 'rmff_dump_cont()' Remote Heap Buffer Overflow Vulnerability

Solution:
Please see the references for more information.


xine xine-lib 1-rc2

• xine xine-lib-1.1.9.1.tar.bz2
  http://downloads.sourceforge.net/xine/xine-lib-1.1.9.1.tar.bz2?modtime =1200069518&big_mirror=0

Ubuntu Ubuntu Linux 7.10 powerpc

• Ubuntu libxine-dev_1.1.7-1ubuntu1.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine-dev_1.1 .7-1ubuntu1.3_all.deb


• Ubuntu libxine1-console_1.1.7-1ubuntu1.3_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-co nsole_1.1.7-1ubuntu1.3_powerpc.deb


• Ubuntu libxine1-dbg_1.1.7-1ubuntu1.3_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-dbg_1. 1.7-1ubuntu1.3_powerpc.deb


• Ubuntu libxine1-doc_1.1.7-1ubuntu1.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-doc_1. 1.7-1ubuntu1.3_all.deb


• Ubuntu libxine1-ffmpeg_1.1.7-1ubuntu1.3_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-ff mpeg_1.1.7-1ubuntu1.3_powerpc.deb


• Ubuntu libxine1-gnome_1.1.7-1ubuntu1.3_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-gn ome_1.1.7-1ubuntu1.3_powerpc.deb


• Ubuntu libxine1-plugins_1.1.7-1ubuntu1.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-pl ugins_1.1.7-1ubuntu1.3_all.deb


• Ubuntu libxine1_1.1.7-1ubuntu1.3_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1_1.1.7- 1ubuntu1.3_powerpc.deb

xine xine-lib 1-rc8

• xine xine-lib-1.1.9.1.tar.bz2
  http://downloads.sourceforge.net/xine/xine-lib-1.1.9.1.tar.bz2?modtime =1200069518&big_mirror=0

Ubuntu Ubuntu Linux 8.04 LTS powerpc

• Ubuntu libxine-dev_1.1.11.1-1ubuntu3.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine-dev_1.1.11.1-1ubu ntu3.1_powerpc.deb


• Ubuntu libxine1-all-plugins_1.1.11.1-1ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-al l-plugins_1.1.11.1-1ubuntu3.1_all.deb


• Ubuntu libxine1-bin_1.1.11.1-1ubuntu3.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-bin_1.1.11.1-1ub untu3.1_powerpc.deb


• Ubuntu libxine1-console_1.1.11.1-1ubuntu3.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-console_1.1.11.1 -1ubuntu3.1_powerpc.deb


• Ubuntu libxine1-dbg_1.1.11.1-1ubuntu3.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-dbg_1.1.11.1-1ub untu3.1_powerpc.deb


• Ubuntu libxine1-doc_1.1.11.1-1ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-doc_1. 1.11.1-1ubuntu3.1_all.deb


• Ubuntu libxine1-ffmpeg_1.1.11.1-1ubuntu3.1_powerpc.deb
  http://ports.ubuntu.com/pool/universe/x/xine-lib/libxine1-ffmpeg_1.1.1 1.1-1ubuntu3.1_powerpc.deb


• Ubuntu libxine1-gnome_1.1.11.1-1ubuntu3.1_powerpc.deb
  http://ports.ubuntu.com/pool/universe/x/xine-lib/libxine1-gnome_1.1.11 .1-1ubuntu3.1_powerpc.deb


• Ubuntu libxine1-misc-plugins_1.1.11.1-1ubuntu3.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-misc-plugins_1.1 .11.1-1ubuntu3.1_powerpc.deb


• Ubuntu libxine1-plugins_1.1.11.1-1ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-pl ugins_1.1.11.1-1ubuntu3.1_all.deb


• Ubuntu libxine1-x_1.1.11.1-1ubuntu3.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-x_1.1.11.1-1ubun tu3.1_powerpc.deb


• Ubuntu libxine1_1.1.11.1-1ubuntu3.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1_1.1.11.1-1ubuntu 3.1_powerpc.deb

xine xine-lib 1-beta3

• xine xine-lib-1.1.9.1.tar.bz2
  http://downloads.sourceforge.net/xine/xine-lib-1.1.9.1.tar.bz2?modtime =1200069518&big_mirror=0

Ubuntu Ubuntu Linux 8.04 LTS sparc

• Ubuntu libxine-dev_1.1.11.1-1ubuntu3.1_sparc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine-dev_1.1.11.1-1ubu ntu3.1_sparc.deb


• Ubuntu libxine1-all-plugins_1.1.11.1-1ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-al l-plugins_1.1.11.1-1ubuntu3.1_all.deb


• Ubuntu libxine1-bin_1.1.11.1-1ubuntu3.1_sparc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-bin_1.1.11.1-1ub untu3.1_sparc.deb


• Ubuntu libxine1-console_1.1.11.1-1ubuntu3.1_sparc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-console_1.1.11.1 -1ubuntu3.1_sparc.deb


• Ubuntu libxine1-dbg_1.1.11.1-1ubuntu3.1_sparc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-dbg_1.1.11.1-1ub untu3.1_sparc.deb


• Ubuntu libxine1-doc_1.1.11.1-1ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-doc_1. 1.11.1-1ubuntu3.1_all.deb


• Ubuntu libxine1-ffmpeg_1.1.11.1-1ubuntu3.1_sparc.deb
  http://ports.ubuntu.com/pool/universe/x/xine-lib/libxine1-ffmpeg_1.1.1 1.1-1ubuntu3.1_sparc.deb


• Ubuntu libxine1-gnome_1.1.11.1-1ubuntu3.1_sparc.deb
  http://ports.ubuntu.com/pool/universe/x/xine-lib/libxine1-gnome_1.1.11 .1-1ubuntu3.1_sparc.deb


• Ubuntu libxine1-misc-plugins_1.1.11.1-1ubuntu3.1_sparc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-misc-plugins_1.1 .11.1-1ubuntu3.1_sparc.deb


• Ubuntu libxine1-plugins_1.1.11.1-1ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-pl ugins_1.1.11.1-1ubuntu3.1_all.deb


• Ubuntu libxine1-x_1.1.11.1-1ubuntu3.1_sparc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-x_1.1.11.1-1ubun tu3.1_sparc.deb


• Ubuntu libxine1_1.1.11.1-1ubuntu3.1_sparc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1_1.1.11.1-1ubuntu 3.1_sparc.deb

Ubuntu Ubuntu Linux 6.06 LTS sparc

• Ubuntu libxine-dev_1.1.1+ubuntu2-7.9_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine-dev_1.1 .1+ubuntu2-7.9_sparc.deb


• Ubuntu libxine-main1_1.1.1+ubuntu2-7.9_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine-main1_1 .1.1+ubuntu2-7.9_sparc.deb

xine xine-lib 1-beta4

• xine xine-lib-1.1.9.1.tar.bz2
  http://downloads.sourceforge.net/xine/xine-lib-1.1.9.1.tar.bz2?modtime =1200069518&big_mirror=0

xine xine-lib 1-rc5

• xine xine-lib-1.1.9.1.tar.bz2
  http://downloads.sourceforge.net/xine/xine-lib-1.1.9.1.tar.bz2?modtime =1200069518&big_mirror=0

Ubuntu Ubuntu Linux 8.04 LTS amd64

• Ubuntu libxine-dev_1.1.11.1-1ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine-dev_1.1 .11.1-1ubuntu3.1_amd64.deb


• Ubuntu libxine1-all-plugins_1.1.11.1-1ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-al l-plugins_1.1.11.1-1ubuntu3.1_all.deb


• Ubuntu libxine1-bin_1.1.11.1-1ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-bin_1. 1.11.1-1ubuntu3.1_amd64.deb


• Ubuntu libxine1-console_1.1.11.1-1ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-consol e_1.1.11.1-1ubuntu3.1_amd64.deb


• Ubuntu libxine1-dbg_1.1.11.1-1ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-dbg_1. 1.11.1-1ubuntu3.1_amd64.deb


• Ubuntu libxine1-doc_1.1.11.1-1ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-doc_1. 1.11.1-1ubuntu3.1_all.deb


• Ubuntu libxine1-ffmpeg_1.1.11.1-1ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-ff mpeg_1.1.11.1-1ubuntu3.1_amd64.deb


• Ubuntu libxine1-gnome_1.1.11.1-1ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-gn ome_1.1.11.1-1ubuntu3.1_amd64.deb


• Ubuntu libxine1-misc-plugins_1.1.11.1-1ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-misc-p lugins_1.1.11.1-1ubuntu3.1_amd64.deb


• Ubuntu libxine1-plugins_1.1.11.1-1ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-pl ugins_1.1.11.1-1ubuntu3.1_all.deb


• Ubuntu libxine1-x_1.1.11.1-1ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-x_1.1. 11.1-1ubuntu3.1_amd64.deb


• Ubuntu libxine1_1.1.11.1-1ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1_1.1.11 .1-1ubuntu3.1_amd64.deb

Ubuntu Ubuntu Linux 7.10 sparc

• Ubuntu libxine-dev_1.1.7-1ubuntu1.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine-dev_1.1 .7-1ubuntu1.3_all.deb


• Ubuntu libxine1-console_1.1.7-1ubuntu1.3_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-co nsole_1.1.7-1ubuntu1.3_sparc.deb


• Ubuntu libxine1-dbg_1.1.7-1ubuntu1.3_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-dbg_1. 1.7-1ubuntu1.3_sparc.deb


• Ubuntu libxine1-doc_1.1.7-1ubuntu1.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-doc_1. 1.7-1ubuntu1.3_all.deb


• Ubuntu libxine1-ffmpeg_1.1.7-1ubuntu1.3_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-ff mpeg_1.1.7-1ubuntu1.3_sparc.deb


• Ubuntu libxine1-gnome_1.1.7-1ubuntu1.3_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-gn ome_1.1.7-1ubuntu1.3_sparc.deb


• Ubuntu libxine1-plugins_1.1.7-1ubuntu1.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-pl ugins_1.1.7-1ubuntu1.3_all.deb


• Ubuntu libxine1_1.1.7-1ubuntu1.3_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1_1.1.7- 1ubuntu1.3_sparc.deb

Ubuntu Ubuntu Linux 7.04 i386

• Ubuntu libxine-dev_1.1.4-2ubuntu3.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine-dev_1.1 .4-2ubuntu3.1_i386.deb


• Ubuntu libxine-extracodecs_1.1.4-2ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/multiverse/x/xine-lib/libxine-e xtracodecs_1.1.4-2ubuntu3.1_all.deb


• Ubuntu libxine-main1_1.1.4-2ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine-mai n1_1.1.4-2ubuntu3.1_all.deb


• Ubuntu libxine1-console_1.1.4-2ubuntu3.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-co nsole_1.1.4-2ubuntu3.1_i386.deb


• Ubuntu libxine1-dbg_1.1.4-2ubuntu3.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-dbg_1. 1.4-2ubuntu3.1_i386.deb


• Ubuntu libxine1-ffmpeg_1.1.4-2ubuntu3.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-ff mpeg_1.1.4-2ubuntu3.1_i386.deb


• Ubuntu libxine1-gnome_1.1.4-2ubuntu3.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-gn ome_1.1.4-2ubuntu3.1_i386.deb


• Ubuntu libxine1-kde_1.1.4-2ubuntu3.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-kde_1. 1.4-2ubuntu3.1_i386.deb


• Ubuntu libxine1-plugins_1.1.4-2ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-pl ugins_1.1.4-2ubuntu3.1_all.deb


• Ubuntu libxine1_1.1.4-2ubuntu3.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1_1.1.4- 2ubuntu3.1_i386.deb

xine xine-lib 1-beta9

• xine xine-lib-1.1.9.1.tar.bz2
  http://downloads.sourceforge.net/xine/xine-lib-1.1.9.1.tar.bz2?modtime =1200069518&big_mirror=0

xine xine-lib 1-rc3

• xine xine-lib-1.1.9.1.tar.bz2
  http://downloads.sourceforge.net/xine/xine-lib-1.1.9.1.tar.bz2?modtime =1200069518&big_mirror=0

xine xine-lib 1-beta12

• xine xine-lib-1.1.9.1.tar.bz2
  http://downloads.sourceforge.net/xine/xine-lib-1.1.9.1.tar.bz2?modtime =1200069518&big_mirror=0

xine xine-lib 1-rc0

• xine xine-lib-1.1.9.1.tar.bz2
  http://downloads.sourceforge.net/xine/xine-lib-1.1.9.1.tar.bz2?modtime =1200069518&big_mirror=0

xine xine-lib 1-beta5

• xine xine-lib-1.1.9.1.tar.bz2
  http://downloads.sourceforge.net/xine/xine-lib-1.1.9.1.tar.bz2?modtime =1200069518&big_mirror=0

xine xine-lib 1-alpha

• xine xine-lib-1.1.9.1.tar.bz2
  http://downloads.sourceforge.net/xine/xine-lib-1.1.9.1.tar.bz2?modtime =1200069518&big_mirror=0

xine xine-lib 1-rc6a

• xine xine-lib-1.1.9.1.tar.bz2
  http://downloads.sourceforge.net/xine/xine-lib-1.1.9.1.tar.bz2?modtime =1200069518&big_mirror=0

xine xine-lib 1-rc6

• xine xine-lib-1.1.9.1.tar.bz2
  http://downloads.sourceforge.net/xine/xine-lib-1.1.9.1.tar.bz2?modtime =1200069518&big_mirror=0

xine xine-lib 1-beta1

• xine xine-lib-1.1.9.1.tar.bz2
  http://downloads.sourceforge.net/xine/xine-lib-1.1.9.1.tar.bz2?modtime =1200069518&big_mirror=0

xine xine-lib 1-rc3a

• xine xine-lib-1.1.9.1.tar.bz2
  http://downloads.sourceforge.net/xine/xine-lib-1.1.9.1.tar.bz2?modtime =1200069518&big_mirror=0

Ubuntu Ubuntu Linux 7.04 amd64

• Ubuntu libxine-dev_1.1.4-2ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine-dev_1.1 .4-2ubuntu3.1_amd64.deb


• Ubuntu libxine-extracodecs_1.1.4-2ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/multiverse/x/xine-lib/libxine-e xtracodecs_1.1.4-2ubuntu3.1_all.deb


• Ubuntu libxine-main1_1.1.4-2ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine-mai n1_1.1.4-2ubuntu3.1_all.deb


• Ubuntu libxine1-console_1.1.4-2ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-co nsole_1.1.4-2ubuntu3.1_amd64.deb


• Ubuntu libxine1-dbg_1.1.4-2ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-dbg_1. 1.4-2ubuntu3.1_amd64.deb


• Ubuntu libxine1-ffmpeg_1.1.4-2ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-ff mpeg_1.1.4-2ubuntu3.1_amd64.deb


• Ubuntu libxine1-gnome_1.1.4-2ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-gn ome_1.1.4-2ubuntu3.1_amd64.deb


• Ubuntu libxine1-kde_1.1.4-2ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-kde_1. 1.4-2ubuntu3.1_amd64.deb


• Ubuntu libxine1-plugins_1.1.4-2ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-pl ugins_1.1.4-2ubuntu3.1_all.deb


• Ubuntu libxine1_1.1.4-2ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1_1.1.4- 2ubuntu3.1_amd64.deb

xine xine-lib 1-beta8

• xine xine-lib-1.1.9.1.tar.bz2
  http://downloads.sourceforge.net/xine/xine-lib-1.1.9.1.tar.bz2?modtime =1200069518&big_mirror=0

xine xine-lib 1.0

• xine xine-lib-1.1.9.1.tar.bz2
  http://downloads.sourceforge.net/xine/xine-lib-1.1.9.1.tar.bz2?modtime =1200069518&big_mirror=0

xine xine-lib 1.0.1

• xine xine-lib-1.1.9.1.tar.bz2
  http://downloads.sourceforge.net/xine/xine-lib-1.1.9.1.tar.bz2?modtime =1200069518&big_mirror=0

xine xine-lib 1.0.2

• xine xine-lib-1.1.9.1.tar.bz2
  http://downloads.sourceforge.net/xine/xine-lib-1.1.9.1.tar.bz2?modtime =1200069518&big_mirror=0

xine xine-lib 1.1.1

• xine xine-lib-1.1.9.1.tar.bz2
  http://downloads.sourceforge.net/xine/xine-lib-1.1.9.1.tar.bz2?modtime =1200069518&big_mirror=0

xine xine-lib 1.1.2

• xine xine-lib-1.1.9.1.tar.bz2
  http://downloads.sourceforge.net/xine/xine-lib-1.1.9.1.tar.bz2?modtime =1200069518&big_mirror=0

xine xine-lib 1.1.4

• xine xine-lib-1.1.9.1.tar.bz2
  http://downloads.sourceforge.net/xine/xine-lib-1.1.9.1.tar.bz2?modtime =1200069518&big_mirror=0

xine-lib 'rmff_dump_cont()' Remote Heap Buffer Overflow Vulnerability

References:

• 1.1.9.1 Release Notes (xine)
  
• Vendor Home Page (xine)
  
• Xine Heap Buffer Overflow Vulnerability (Luigi Auriemma)