MPlayer 'demux_audio.c' Remote Stack Based Buffer Overflow Vulnerability

Bugtraq ID:	27441
Class:	Boundary Condition Error
CVE:	CVE-2008-0486
Remote:	Yes
Local:	No
Published:	Feb 04 2008 12:00AM
Updated:	Apr 13 2015 09:57PM
Credit:	Damian Frizza and Alfredo Ortega, from the Exploit Writers team of CORE Security Technologies, discovered this issue.
Vulnerable:	xine xine-lib 1.1.10 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 7.10 sparc Ubuntu Ubuntu Linux 7.10 powerpc Ubuntu Ubuntu Linux 7.10 lpia Ubuntu Ubuntu Linux 7.10 i386 Ubuntu Ubuntu Linux 7.10 amd64 Ubuntu Ubuntu Linux 7.04 sparc Ubuntu Ubuntu Linux 7.04 powerpc Ubuntu Ubuntu Linux 7.04 i386 Ubuntu Ubuntu Linux 7.04 amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 SuSE SUSE Linux Enterprise Server 9 SP3 SuSE SUSE Linux Enterprise Server 9 SuSE SUSE Linux Enterprise Server 8 + Linux kernel 2.4.21 + Linux kernel 2.4.19 SuSE SUSE Linux Enterprise Server 10 SP1 SuSE SUSE Linux Enterprise Server 10 SuSE SUSE Linux Enterprise SDK 10.SP1 SuSE SUSE Linux Enterprise SDK 10 SP1 SuSE SUSE Linux Enterprise SDK 10 SuSE Suse Linux Enterprise Desktop 10 SP1 SuSE Suse Linux Enterprise Desktop 10 SuSE SUSE Linux Enterprise 10 SP1 DEBUGINFO SuSE Linux Desktop 1.0 SuSE Linux Desktop 10 SuSE Linux 10.1 x86-64 SuSE Linux 10.1 x86 SuSE Linux 10.1 ppc SuSE Linux 10.0 x86-64 SuSE Linux 10.0 x86 SuSE Linux 10.0 ppc S.u.S.E. UnitedLinux 1.0 S.u.S.E. SuSE Linux School Server for i386 S.u.S.E. SUSE LINUX Retail Solution 8.0 S.u.S.E. SuSE Linux Openexchange Server 4.0 S.u.S.E. SuSE Linux Open-Xchange 4.1 S.u.S.E. SUSE Linux Enterprise Server RT Solution 10 0 S.u.S.E. openSUSE 10.3 S.u.S.E. openSUSE 10.2 S.u.S.E. openSUSE 10.1 S.u.S.E. Open-Enterprise-Server 9.0 S.u.S.E. Open-Enterprise-Server 1 S.u.S.E. Open-Enterprise-Server 0 S.u.S.E. Office Server S.u.S.E. Novell Linux POS 9 S.u.S.E. Novell Linux Desktop SDK 9.0 S.u.S.E. Novell Linux Desktop 9.0 S.u.S.E. Novell Linux Desktop 1.0 S.u.S.E. Linux Professional 10.0 OSS S.u.S.E. Linux Professional 10.0 S.u.S.E. Linux Professional 10.2 X86 64 S.u.S.E. Linux Professional 10.2 S.u.S.E. Linux Professional 10.1 S.u.S.E. Linux Personal 10.0 OSS S.u.S.E. Linux Personal 10.2 X86 64 S.u.S.E. Linux Personal 10.2 S.u.S.E. Linux Personal 10.1 S.u.S.E. Linux Database Server 0 Redhat Fedora 7 MPlayer MPlayer 1.0rc2 + Mandriva Linux Mandrake 2007.1 x86_64 + Mandriva Linux Mandrake 2007.1 + Mandriva Linux Mandrake 2007.0 x86_64 + Mandriva Linux Mandrake 2007.0 Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 Mandriva Linux Mandrake 2007.1 x86_64 Mandriva Linux Mandrake 2007.1 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 Gentoo Linux Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0
Not Vulnerable:

MPlayer 'demux_audio.c' Remote Stack Based Buffer Overflow Vulnerability

MPlayer is prone to a remote stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input before copying it to an insufficiently sized buffer.

Attackers can exploit this issue to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.

MPlayer 1.0 rc2 is vulnerable; other versions may also be affected.

MPlayer 'demux_audio.c' Remote Stack Based Buffer Overflow Vulnerability

Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

MPlayer 'demux_audio.c' Remote Stack Based Buffer Overflow Vulnerability

Solution:
The vendor released fixes to address this issue. Please see the references for more information.


Ubuntu Ubuntu Linux 7.10 powerpc

• Ubuntu libxine-dev_1.1.7-1ubuntu1.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine-dev_1.1 .7-1ubuntu1.3_all.deb


• Ubuntu libxine1-console_1.1.7-1ubuntu1.3_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-co nsole_1.1.7-1ubuntu1.3_powerpc.deb


• Ubuntu libxine1-dbg_1.1.7-1ubuntu1.3_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-dbg_1. 1.7-1ubuntu1.3_powerpc.deb


• Ubuntu libxine1-doc_1.1.7-1ubuntu1.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-doc_1. 1.7-1ubuntu1.3_all.deb


• Ubuntu libxine1-ffmpeg_1.1.7-1ubuntu1.3_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-ff mpeg_1.1.7-1ubuntu1.3_powerpc.deb


• Ubuntu libxine1-gnome_1.1.7-1ubuntu1.3_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-gn ome_1.1.7-1ubuntu1.3_powerpc.deb


• Ubuntu libxine1-plugins_1.1.7-1ubuntu1.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-pl ugins_1.1.7-1ubuntu1.3_all.deb


• Ubuntu libxine1_1.1.7-1ubuntu1.3_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1_1.1.7- 1ubuntu1.3_powerpc.deb

Ubuntu Ubuntu Linux 8.04 LTS powerpc

• Ubuntu libxine-dev_1.1.11.1-1ubuntu3.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine-dev_1.1.11.1-1ubu ntu3.1_powerpc.deb


• Ubuntu libxine1-all-plugins_1.1.11.1-1ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-al l-plugins_1.1.11.1-1ubuntu3.1_all.deb


• Ubuntu libxine1-bin_1.1.11.1-1ubuntu3.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-bin_1.1.11.1-1ub untu3.1_powerpc.deb


• Ubuntu libxine1-console_1.1.11.1-1ubuntu3.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-console_1.1.11.1 -1ubuntu3.1_powerpc.deb


• Ubuntu libxine1-dbg_1.1.11.1-1ubuntu3.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-dbg_1.1.11.1-1ub untu3.1_powerpc.deb


• Ubuntu libxine1-doc_1.1.11.1-1ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-doc_1. 1.11.1-1ubuntu3.1_all.deb


• Ubuntu libxine1-ffmpeg_1.1.11.1-1ubuntu3.1_powerpc.deb
  http://ports.ubuntu.com/pool/universe/x/xine-lib/libxine1-ffmpeg_1.1.1 1.1-1ubuntu3.1_powerpc.deb


• Ubuntu libxine1-gnome_1.1.11.1-1ubuntu3.1_powerpc.deb
  http://ports.ubuntu.com/pool/universe/x/xine-lib/libxine1-gnome_1.1.11 .1-1ubuntu3.1_powerpc.deb


• Ubuntu libxine1-misc-plugins_1.1.11.1-1ubuntu3.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-misc-plugins_1.1 .11.1-1ubuntu3.1_powerpc.deb


• Ubuntu libxine1-plugins_1.1.11.1-1ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-pl ugins_1.1.11.1-1ubuntu3.1_all.deb


• Ubuntu libxine1-x_1.1.11.1-1ubuntu3.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-x_1.1.11.1-1ubun tu3.1_powerpc.deb


• Ubuntu libxine1_1.1.11.1-1ubuntu3.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1_1.1.11.1-1ubuntu 3.1_powerpc.deb

Ubuntu Ubuntu Linux 8.04 LTS sparc

• Ubuntu libxine-dev_1.1.11.1-1ubuntu3.1_sparc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine-dev_1.1.11.1-1ubu ntu3.1_sparc.deb


• Ubuntu libxine1-all-plugins_1.1.11.1-1ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-al l-plugins_1.1.11.1-1ubuntu3.1_all.deb


• Ubuntu libxine1-bin_1.1.11.1-1ubuntu3.1_sparc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-bin_1.1.11.1-1ub untu3.1_sparc.deb


• Ubuntu libxine1-console_1.1.11.1-1ubuntu3.1_sparc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-console_1.1.11.1 -1ubuntu3.1_sparc.deb


• Ubuntu libxine1-dbg_1.1.11.1-1ubuntu3.1_sparc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-dbg_1.1.11.1-1ub untu3.1_sparc.deb


• Ubuntu libxine1-doc_1.1.11.1-1ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-doc_1. 1.11.1-1ubuntu3.1_all.deb


• Ubuntu libxine1-ffmpeg_1.1.11.1-1ubuntu3.1_sparc.deb
  http://ports.ubuntu.com/pool/universe/x/xine-lib/libxine1-ffmpeg_1.1.1 1.1-1ubuntu3.1_sparc.deb


• Ubuntu libxine1-gnome_1.1.11.1-1ubuntu3.1_sparc.deb
  http://ports.ubuntu.com/pool/universe/x/xine-lib/libxine1-gnome_1.1.11 .1-1ubuntu3.1_sparc.deb


• Ubuntu libxine1-misc-plugins_1.1.11.1-1ubuntu3.1_sparc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-misc-plugins_1.1 .11.1-1ubuntu3.1_sparc.deb


• Ubuntu libxine1-plugins_1.1.11.1-1ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-pl ugins_1.1.11.1-1ubuntu3.1_all.deb


• Ubuntu libxine1-x_1.1.11.1-1ubuntu3.1_sparc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-x_1.1.11.1-1ubun tu3.1_sparc.deb


• Ubuntu libxine1_1.1.11.1-1ubuntu3.1_sparc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1_1.1.11.1-1ubuntu 3.1_sparc.deb

Ubuntu Ubuntu Linux 6.06 LTS sparc

• Ubuntu libxine-dev_1.1.1+ubuntu2-7.9_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine-dev_1.1 .1+ubuntu2-7.9_sparc.deb


• Ubuntu libxine-main1_1.1.1+ubuntu2-7.9_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine-main1_1 .1.1+ubuntu2-7.9_sparc.deb

Ubuntu Ubuntu Linux 8.04 LTS amd64

• Ubuntu libxine-dev_1.1.11.1-1ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine-dev_1.1 .11.1-1ubuntu3.1_amd64.deb


• Ubuntu libxine1-all-plugins_1.1.11.1-1ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-al l-plugins_1.1.11.1-1ubuntu3.1_all.deb


• Ubuntu libxine1-bin_1.1.11.1-1ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-bin_1. 1.11.1-1ubuntu3.1_amd64.deb


• Ubuntu libxine1-console_1.1.11.1-1ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-consol e_1.1.11.1-1ubuntu3.1_amd64.deb


• Ubuntu libxine1-dbg_1.1.11.1-1ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-dbg_1. 1.11.1-1ubuntu3.1_amd64.deb


• Ubuntu libxine1-doc_1.1.11.1-1ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-doc_1. 1.11.1-1ubuntu3.1_all.deb


• Ubuntu libxine1-ffmpeg_1.1.11.1-1ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-ff mpeg_1.1.11.1-1ubuntu3.1_amd64.deb


• Ubuntu libxine1-gnome_1.1.11.1-1ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-gn ome_1.1.11.1-1ubuntu3.1_amd64.deb


• Ubuntu libxine1-misc-plugins_1.1.11.1-1ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-misc-p lugins_1.1.11.1-1ubuntu3.1_amd64.deb


• Ubuntu libxine1-plugins_1.1.11.1-1ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-pl ugins_1.1.11.1-1ubuntu3.1_all.deb


• Ubuntu libxine1-x_1.1.11.1-1ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-x_1.1. 11.1-1ubuntu3.1_amd64.deb


• Ubuntu libxine1_1.1.11.1-1ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1_1.1.11 .1-1ubuntu3.1_amd64.deb

Ubuntu Ubuntu Linux 7.10 sparc

• Ubuntu libxine-dev_1.1.7-1ubuntu1.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine-dev_1.1 .7-1ubuntu1.3_all.deb


• Ubuntu libxine1-console_1.1.7-1ubuntu1.3_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-co nsole_1.1.7-1ubuntu1.3_sparc.deb


• Ubuntu libxine1-dbg_1.1.7-1ubuntu1.3_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-dbg_1. 1.7-1ubuntu1.3_sparc.deb


• Ubuntu libxine1-doc_1.1.7-1ubuntu1.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-doc_1. 1.7-1ubuntu1.3_all.deb


• Ubuntu libxine1-ffmpeg_1.1.7-1ubuntu1.3_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-ff mpeg_1.1.7-1ubuntu1.3_sparc.deb


• Ubuntu libxine1-gnome_1.1.7-1ubuntu1.3_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-gn ome_1.1.7-1ubuntu1.3_sparc.deb


• Ubuntu libxine1-plugins_1.1.7-1ubuntu1.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-pl ugins_1.1.7-1ubuntu1.3_all.deb


• Ubuntu libxine1_1.1.7-1ubuntu1.3_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1_1.1.7- 1ubuntu1.3_sparc.deb

Ubuntu Ubuntu Linux 7.04 i386

• Ubuntu libxine-dev_1.1.4-2ubuntu3.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine-dev_1.1 .4-2ubuntu3.1_i386.deb


• Ubuntu libxine-extracodecs_1.1.4-2ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/multiverse/x/xine-lib/libxine-e xtracodecs_1.1.4-2ubuntu3.1_all.deb


• Ubuntu libxine-main1_1.1.4-2ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine-mai n1_1.1.4-2ubuntu3.1_all.deb


• Ubuntu libxine1-console_1.1.4-2ubuntu3.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-co nsole_1.1.4-2ubuntu3.1_i386.deb


• Ubuntu libxine1-dbg_1.1.4-2ubuntu3.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-dbg_1. 1.4-2ubuntu3.1_i386.deb


• Ubuntu libxine1-ffmpeg_1.1.4-2ubuntu3.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-ff mpeg_1.1.4-2ubuntu3.1_i386.deb


• Ubuntu libxine1-gnome_1.1.4-2ubuntu3.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-gn ome_1.1.4-2ubuntu3.1_i386.deb


• Ubuntu libxine1-kde_1.1.4-2ubuntu3.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-kde_1. 1.4-2ubuntu3.1_i386.deb


• Ubuntu libxine1-plugins_1.1.4-2ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-pl ugins_1.1.4-2ubuntu3.1_all.deb


• Ubuntu libxine1_1.1.4-2ubuntu3.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1_1.1.4- 2ubuntu3.1_i386.deb

Ubuntu Ubuntu Linux 7.04 amd64

• Ubuntu libxine-dev_1.1.4-2ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine-dev_1.1 .4-2ubuntu3.1_amd64.deb


• Ubuntu libxine-extracodecs_1.1.4-2ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/multiverse/x/xine-lib/libxine-e xtracodecs_1.1.4-2ubuntu3.1_all.deb


• Ubuntu libxine-main1_1.1.4-2ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine-mai n1_1.1.4-2ubuntu3.1_all.deb


• Ubuntu libxine1-console_1.1.4-2ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-co nsole_1.1.4-2ubuntu3.1_amd64.deb


• Ubuntu libxine1-dbg_1.1.4-2ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-dbg_1. 1.4-2ubuntu3.1_amd64.deb


• Ubuntu libxine1-ffmpeg_1.1.4-2ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-ff mpeg_1.1.4-2ubuntu3.1_amd64.deb


• Ubuntu libxine1-gnome_1.1.4-2ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-gn ome_1.1.4-2ubuntu3.1_amd64.deb


• Ubuntu libxine1-kde_1.1.4-2ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-kde_1. 1.4-2ubuntu3.1_amd64.deb


• Ubuntu libxine1-plugins_1.1.4-2ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-pl ugins_1.1.4-2ubuntu3.1_all.deb


• Ubuntu libxine1_1.1.4-2ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1_1.1.4- 2ubuntu3.1_amd64.deb

Ubuntu Ubuntu Linux 6.06 LTS powerpc

• Ubuntu libxine-dev_1.1.1+ubuntu2-7.9_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine-dev_1.1 .1+ubuntu2-7.9_powerpc.deb


• Ubuntu libxine-main1_1.1.1+ubuntu2-7.9_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine-main1_1 .1.1+ubuntu2-7.9_powerpc.deb

Ubuntu Ubuntu Linux 8.04 LTS lpia

• Ubuntu libxine-dev_1.1.11.1-1ubuntu3.1_lpia.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine-dev_1.1.11.1-1ubu ntu3.1_lpia.deb


• Ubuntu libxine1-all-plugins_1.1.11.1-1ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-al l-plugins_1.1.11.1-1ubuntu3.1_all.deb


• Ubuntu libxine1-bin_1.1.11.1-1ubuntu3.1_lpia.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-bin_1.1.11.1-1ub untu3.1_lpia.deb


• Ubuntu libxine1-console_1.1.11.1-1ubuntu3.1_lpia.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-console_1.1.11.1 -1ubuntu3.1_lpia.deb


• Ubuntu libxine1-dbg_1.1.11.1-1ubuntu3.1_lpia.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-dbg_1.1.11.1-1ub untu3.1_lpia.deb


• Ubuntu libxine1-doc_1.1.11.1-1ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-doc_1. 1.11.1-1ubuntu3.1_all.deb


• Ubuntu libxine1-ffmpeg_1.1.11.1-1ubuntu3.1_lpia.deb
  http://ports.ubuntu.com/pool/universe/x/xine-lib/libxine1-ffmpeg_1.1.1 1.1-1ubuntu3.1_lpia.deb


• Ubuntu libxine1-gnome_1.1.11.1-1ubuntu3.1_lpia.deb
  http://ports.ubuntu.com/pool/universe/x/xine-lib/libxine1-gnome_1.1.11 .1-1ubuntu3.1_lpia.deb


• Ubuntu libxine1-misc-plugins_1.1.11.1-1ubuntu3.1_lpia.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-misc-plugins_1.1 .11.1-1ubuntu3.1_lpia.deb


• Ubuntu libxine1-plugins_1.1.11.1-1ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-pl ugins_1.1.11.1-1ubuntu3.1_all.deb


• Ubuntu libxine1-x_1.1.11.1-1ubuntu3.1_lpia.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-x_1.1.11.1-1ubun tu3.1_lpia.deb


• Ubuntu libxine1_1.1.11.1-1ubuntu3.1_lpia.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1_1.1.11.1-1ubuntu 3.1_lpia.deb

Ubuntu Ubuntu Linux 7.10 lpia

• Ubuntu libxine-dev_1.1.7-1ubuntu1.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine-dev_1.1 .7-1ubuntu1.3_all.deb


• Ubuntu libxine1-console_1.1.7-1ubuntu1.3_lpia.deb
  http://ports.ubuntu.com/pool/universe/x/xine-lib/libxine1-console_1.1. 7-1ubuntu1.3_lpia.deb


• Ubuntu libxine1-dbg_1.1.7-1ubuntu1.3_lpia.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-dbg_1.1.7-1ubunt u1.3_lpia.deb


• Ubuntu libxine1-doc_1.1.7-1ubuntu1.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-doc_1. 1.7-1ubuntu1.3_all.deb


• Ubuntu libxine1-ffmpeg_1.1.7-1ubuntu1.3_lpia.deb
  http://ports.ubuntu.com/pool/universe/x/xine-lib/libxine1-ffmpeg_1.1.7 -1ubuntu1.3_lpia.deb


• Ubuntu libxine1-gnome_1.1.7-1ubuntu1.3_lpia.deb
  http://ports.ubuntu.com/pool/universe/x/xine-lib/libxine1-gnome_1.1.7- 1ubuntu1.3_lpia.deb


• Ubuntu libxine1-plugins_1.1.7-1ubuntu1.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-pl ugins_1.1.7-1ubuntu1.3_all.deb


• Ubuntu libxine1_1.1.7-1ubuntu1.3_lpia.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1_1.1.7-1ubuntu1.3 _lpia.deb

Ubuntu Ubuntu Linux 6.06 LTS i386

• Ubuntu libxine-dev_1.1.1+ubuntu2-7.9_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine-dev_1.1 .1+ubuntu2-7.9_i386.deb


• Ubuntu libxine-main1_1.1.1+ubuntu2-7.9_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine-main1_1 .1.1+ubuntu2-7.9_i386.deb

Ubuntu Ubuntu Linux 7.10 i386

• Ubuntu libxine-dev_1.1.7-1ubuntu1.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine-dev_1.1 .7-1ubuntu1.3_all.deb


• Ubuntu libxine1-console_1.1.7-1ubuntu1.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-co nsole_1.1.7-1ubuntu1.3_i386.deb


• Ubuntu libxine1-dbg_1.1.7-1ubuntu1.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-dbg_1. 1.7-1ubuntu1.3_i386.deb


• Ubuntu libxine1-doc_1.1.7-1ubuntu1.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-doc_1. 1.7-1ubuntu1.3_all.deb


• Ubuntu libxine1-ffmpeg_1.1.7-1ubuntu1.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-ff mpeg_1.1.7-1ubuntu1.3_i386.deb


• Ubuntu libxine1-gnome_1.1.7-1ubuntu1.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-gn ome_1.1.7-1ubuntu1.3_i386.deb


• Ubuntu libxine1-plugins_1.1.7-1ubuntu1.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-pl ugins_1.1.7-1ubuntu1.3_all.deb


• Ubuntu libxine1_1.1.7-1ubuntu1.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1_1.1.7- 1ubuntu1.3_i386.deb

Ubuntu Ubuntu Linux 6.06 LTS amd64

• Ubuntu libxine-dev_1.1.1+ubuntu2-7.9_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine-dev_1.1 .1+ubuntu2-7.9_amd64.deb


• Ubuntu libxine-main1_1.1.1+ubuntu2-7.9_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine-main1_1 .1.1+ubuntu2-7.9_amd64.deb

MPlayer 'demux_audio.c' Remote Stack Based Buffer Overflow Vulnerability

References:

• Diff of /trunk/libmpdemux/demux_audio.c (MPlayer)
  
• MPlayer 1.0rc2 buffer overflow vulnerability (Core Security Technologies)
  
• MPlayer Homepage (MPlayer)
  
• CORE-2007-1218: MPlayer 1.0rc2 buffer overflow vulnerability (CORE Security Technologies Advisories )