xine-lib STTS QuickTime Atom Remote Buffer Overflow Vulnerability

Bugtraq ID:	34384
Class:	Boundary Condition Error
CVE:	CVE-2009-1274
Remote:	Yes
Local:	No
Published:	Apr 04 2009 12:00AM
Updated:	Apr 13 2015 09:28PM
Credit:	Tobias Klein
Vulnerable:	xine xine-lib 1.1.16 xine xine-lib 1.1.15 xine xine-lib 1.1.14 xine xine-lib 1.1.13 xine xine-lib 1.1.12 xine xine-lib 1.1.11 xine xine-lib 1.1.10 xine xine-lib 1.1.9 .1 xine xine-lib 1.1.9 xine xine-lib 1.1.4 xine xine-lib 1.1.3 xine xine-lib 1.1.2 xine xine-lib 1.1.1 xine xine-lib 1.1 xine xine-lib 1.0.2 xine xine-lib 1.0.1 xine xine-lib 1.0 xine xine-lib 1.1.16.2 xine xine-lib 1.1.16.1 xine xine-lib 1.1.11.1 xine xine-lib 1.1.10.1 Ubuntu Ubuntu Linux 8.10 sparc Ubuntu Ubuntu Linux 8.10 powerpc Ubuntu Ubuntu Linux 8.10 lpia Ubuntu Ubuntu Linux 8.10 i386 Ubuntu Ubuntu Linux 8.10 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 SuSE SUSE Linux Enterprise Server 9 SuSE SUSE Linux Enterprise 11 SuSE SUSE Linux Enterprise 10 S.u.S.E. openSUSE 11.1 S.u.S.E. openSUSE 11.0 S.u.S.E. openSUSE 10.3 S.u.S.E. Novell Linux Desktop 9.0 Pardus Linux 2008 0 Mandriva Linux Mandrake 2009.0 x86_64 Mandriva Linux Mandrake 2009.0 Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 Gentoo Linux
Not Vulnerable:	xine xine-lib 1.1.16.3

xine-lib STTS QuickTime Atom Remote Buffer Overflow Vulnerability

The 'xine-lib' library is prone to a remote buffer-overflow vulnerability because the software fails to perform adequate boundary checks on user-supplied data.

An attacker can exploit this issue to execute arbitrary code with the privileges of the user running an application that relies on the affected library. Failed exploit attempts will result in a denial-of-service condition.

This issue affects xine-lib 1.1.16.2 and earlier.

xine-lib STTS QuickTime Atom Remote Buffer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

xine-lib STTS QuickTime Atom Remote Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references for more information.


Ubuntu Ubuntu Linux 8.04 LTS powerpc

• Ubuntu libxine-dev_1.1.11.1-1ubuntu3.4_powerpc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine-dev_1.1.11.1-1ubu ntu3.4_powerpc.deb


• Ubuntu libxine1-all-plugins_1.1.11.1-1ubuntu3.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-al l-plugins_1.1.11.1-1ubuntu3.4_all.deb


• Ubuntu libxine1-bin_1.1.11.1-1ubuntu3.4_powerpc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-bin_1.1.11.1-1ub untu3.4_powerpc.deb


• Ubuntu libxine1-console_1.1.11.1-1ubuntu3.4_powerpc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-console_1.1.11.1 -1ubuntu3.4_powerpc.deb


• Ubuntu libxine1-dbg_1.1.11.1-1ubuntu3.4_powerpc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-dbg_1.1.11.1-1ub untu3.4_powerpc.deb


• Ubuntu libxine1-doc_1.1.11.1-1ubuntu3.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-doc_1. 1.11.1-1ubuntu3.4_all.deb


• Ubuntu libxine1-ffmpeg_1.1.11.1-1ubuntu3.4_powerpc.deb
  http://ports.ubuntu.com/pool/universe/x/xine-lib/libxine1-ffmpeg_1.1.1 1.1-1ubuntu3.4_powerpc.deb


• Ubuntu libxine1-gnome_1.1.11.1-1ubuntu3.4_powerpc.deb
  http://ports.ubuntu.com/pool/universe/x/xine-lib/libxine1-gnome_1.1.11 .1-1ubuntu3.4_powerpc.deb


• Ubuntu libxine1-misc-plugins_1.1.11.1-1ubuntu3.4_powerpc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-misc-plugins_1.1 .11.1-1ubuntu3.4_powerpc.deb


• Ubuntu libxine1-plugins_1.1.11.1-1ubuntu3.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-pl ugins_1.1.11.1-1ubuntu3.4_all.deb


• Ubuntu libxine1-x_1.1.11.1-1ubuntu3.4_powerpc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-x_1.1.11.1-1ubun tu3.4_powerpc.deb


• Ubuntu libxine1_1.1.11.1-1ubuntu3.4_powerpc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1_1.1.11.1-1ubuntu 3.4_powerpc.deb

Ubuntu Ubuntu Linux 8.10 powerpc

• Ubuntu libxine-dev_1.1.15-0ubuntu3.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine-dev_1.1.15-0ubunt u3.3_powerpc.deb


• Ubuntu libxine1-all-plugins_1.1.15-0ubuntu3.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-al l-plugins_1.1.15-0ubuntu3.3_all.deb


• Ubuntu libxine1-bin_1.1.15-0ubuntu3.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-bin_1.1.15-0ubun tu3.3_powerpc.deb


• Ubuntu libxine1-console_1.1.15-0ubuntu3.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-console_1.1.15-0 ubuntu3.3_powerpc.deb


• Ubuntu libxine1-dbg_1.1.15-0ubuntu3.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-dbg_1.1.15-0ubun tu3.3_powerpc.deb


• Ubuntu libxine1-doc_1.1.15-0ubuntu3.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-doc_1. 1.15-0ubuntu3.3_all.deb


• Ubuntu libxine1-ffmpeg_1.1.15-0ubuntu3.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-ffmpeg_1.1.15-0u buntu3.3_powerpc.deb


• Ubuntu libxine1-gnome_1.1.15-0ubuntu3.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-gnome_1.1.15-0ub untu3.3_powerpc.deb


• Ubuntu libxine1-misc-plugins_1.1.15-0ubuntu3.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-misc-plugins_1.1 .15-0ubuntu3.3_powerpc.deb


• Ubuntu libxine1-plugins_1.1.15-0ubuntu3.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-pl ugins_1.1.15-0ubuntu3.3_all.deb


• Ubuntu libxine1-x_1.1.15-0ubuntu3.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-x_1.1.15-0ubuntu 3.3_powerpc.deb


• Ubuntu libxine1_1.1.15-0ubuntu3.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1_1.1.15-0ubuntu3. 3_powerpc.deb

Ubuntu Ubuntu Linux 8.04 LTS sparc

• Ubuntu libxine-dev_1.1.11.1-1ubuntu3.4_sparc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine-dev_1.1.11.1-1ubu ntu3.4_sparc.deb


• Ubuntu libxine1-all-plugins_1.1.11.1-1ubuntu3.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-al l-plugins_1.1.11.1-1ubuntu3.4_all.deb


• Ubuntu libxine1-bin_1.1.11.1-1ubuntu3.4_sparc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-bin_1.1.11.1-1ub untu3.4_sparc.deb


• Ubuntu libxine1-console_1.1.11.1-1ubuntu3.4_sparc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-console_1.1.11.1 -1ubuntu3.4_sparc.deb


• Ubuntu libxine1-dbg_1.1.11.1-1ubuntu3.4_sparc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-dbg_1.1.11.1-1ub untu3.4_sparc.deb


• Ubuntu libxine1-doc_1.1.11.1-1ubuntu3.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-doc_1. 1.11.1-1ubuntu3.4_all.deb


• Ubuntu libxine1-ffmpeg_1.1.11.1-1ubuntu3.4_sparc.deb
  http://ports.ubuntu.com/pool/universe/x/xine-lib/libxine1-ffmpeg_1.1.1 1.1-1ubuntu3.4_sparc.deb


• Ubuntu libxine1-gnome_1.1.11.1-1ubuntu3.4_sparc.deb
  http://ports.ubuntu.com/pool/universe/x/xine-lib/libxine1-gnome_1.1.11 .1-1ubuntu3.4_sparc.deb


• Ubuntu libxine1-misc-plugins_1.1.11.1-1ubuntu3.4_sparc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-misc-plugins_1.1 .11.1-1ubuntu3.4_sparc.deb


• Ubuntu libxine1-plugins_1.1.11.1-1ubuntu3.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-pl ugins_1.1.11.1-1ubuntu3.4_all.deb


• Ubuntu libxine1-x_1.1.11.1-1ubuntu3.4_sparc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-x_1.1.11.1-1ubun tu3.4_sparc.deb


• Ubuntu libxine1_1.1.11.1-1ubuntu3.4_sparc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1_1.1.11.1-1ubuntu 3.4_sparc.deb

Ubuntu Ubuntu Linux 8.10 i386

• Ubuntu libxine-dev_1.1.15-0ubuntu3.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine-dev_1.1 .15-0ubuntu3.3_i386.deb


• Ubuntu libxine1-all-plugins_1.1.15-0ubuntu3.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-al l-plugins_1.1.15-0ubuntu3.3_all.deb


• Ubuntu libxine1-bin_1.1.15-0ubuntu3.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-bin_1. 1.15-0ubuntu3.3_i386.deb


• Ubuntu libxine1-console_1.1.15-0ubuntu3.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-consol e_1.1.15-0ubuntu3.3_i386.deb


• Ubuntu libxine1-dbg_1.1.15-0ubuntu3.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-dbg_1. 1.15-0ubuntu3.3_i386.deb


• Ubuntu libxine1-doc_1.1.15-0ubuntu3.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-doc_1. 1.15-0ubuntu3.3_all.deb


• Ubuntu libxine1-ffmpeg_1.1.15-0ubuntu3.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-ffmpeg _1.1.15-0ubuntu3.3_i386.deb


• Ubuntu libxine1-gnome_1.1.15-0ubuntu3.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-gnome_ 1.1.15-0ubuntu3.3_i386.deb


• Ubuntu libxine1-misc-plugins_1.1.15-0ubuntu3.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-misc-p lugins_1.1.15-0ubuntu3.3_i386.deb


• Ubuntu libxine1-plugins_1.1.15-0ubuntu3.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-pl ugins_1.1.15-0ubuntu3.3_all.deb


• Ubuntu libxine1-x_1.1.15-0ubuntu3.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-x_1.1. 15-0ubuntu3.3_i386.deb


• Ubuntu libxine1_1.1.15-0ubuntu3.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1_1.1.15 -0ubuntu3.3_i386.deb

Ubuntu Ubuntu Linux 6.06 LTS sparc

• Ubuntu libxine-dev_1.1.1+ubuntu2-7.12_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine-dev_1.1 .1+ubuntu2-7.12_sparc.deb


• Ubuntu libxine-main1_1.1.1+ubuntu2-7.12_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine-main1_1 .1.1+ubuntu2-7.12_sparc.deb

Mandriva Linux Mandrake 2008.0 x86_64

• Mandriva lib64xine-devel-1.1.8-4.8mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64xine1-1.1.8-4.8mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-aa-1.1.8-4.8mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-caca-1.1.8-4.8mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-dxr3-1.1.8-4.8mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-esd-1.1.8-4.8mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-flac-1.1.8-4.8mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-gnomevfs-1.1.8-4.8mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-image-1.1.8-4.8mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-jack-1.1.8-4.8mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-plugins-1.1.8-4.8mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-pulse-1.1.8-4.8mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-sdl-1.1.8-4.8mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-smb-1.1.8-4.8mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 6.06 LTS powerpc

• Ubuntu libxine-dev_1.1.1+ubuntu2-7.12_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine-dev_1.1 .1+ubuntu2-7.12_powerpc.deb


• Ubuntu libxine-main1_1.1.1+ubuntu2-7.12_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine-main1_1 .1.1+ubuntu2-7.12_powerpc.deb

Ubuntu Ubuntu Linux 8.04 LTS amd64

• Ubuntu libxine-dev_1.1.11.1-1ubuntu3.4_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine-dev_1.1 .11.1-1ubuntu3.4_amd64.deb


• Ubuntu libxine1-all-plugins_1.1.11.1-1ubuntu3.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-al l-plugins_1.1.11.1-1ubuntu3.4_all.deb


• Ubuntu libxine1-bin_1.1.11.1-1ubuntu3.4_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-bin_1. 1.11.1-1ubuntu3.4_amd64.deb


• Ubuntu libxine1-console_1.1.11.1-1ubuntu3.4_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-consol e_1.1.11.1-1ubuntu3.4_amd64.deb


• Ubuntu libxine1-dbg_1.1.11.1-1ubuntu3.4_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-dbg_1. 1.11.1-1ubuntu3.4_amd64.deb


• Ubuntu libxine1-doc_1.1.11.1-1ubuntu3.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-doc_1. 1.11.1-1ubuntu3.4_all.deb


• Ubuntu libxine1-ffmpeg_1.1.11.1-1ubuntu3.4_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-ff mpeg_1.1.11.1-1ubuntu3.4_amd64.deb


• Ubuntu libxine1-gnome_1.1.11.1-1ubuntu3.4_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-gn ome_1.1.11.1-1ubuntu3.4_amd64.deb


• Ubuntu libxine1-misc-plugins_1.1.11.1-1ubuntu3.4_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-misc-p lugins_1.1.11.1-1ubuntu3.4_amd64.deb


• Ubuntu libxine1-plugins_1.1.11.1-1ubuntu3.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-pl ugins_1.1.11.1-1ubuntu3.4_all.deb


• Ubuntu libxine1-x_1.1.11.1-1ubuntu3.4_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-x_1.1. 11.1-1ubuntu3.4_amd64.deb


• Ubuntu libxine1_1.1.11.1-1ubuntu3.4_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1_1.1.11 .1-1ubuntu3.4_amd64.deb

Mandriva Linux Mandrake 2008.0

• Mandriva libxine-devel-1.1.8-4.8mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libxine1-1.1.8-4.8mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-aa-1.1.8-4.8mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-caca-1.1.8-4.8mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-dxr3-1.1.8-4.8mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-esd-1.1.8-4.8mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-flac-1.1.8-4.8mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-gnomevfs-1.1.8-4.8mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-image-1.1.8-4.8mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-jack-1.1.8-4.8mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-plugins-1.1.8-4.8mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-pulse-1.1.8-4.8mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-sdl-1.1.8-4.8mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-smb-1.1.8-4.8mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 8.04 LTS lpia

• Ubuntu libxine-dev_1.1.11.1-1ubuntu3.4_lpia.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine-dev_1.1.11.1-1ubu ntu3.4_lpia.deb


• Ubuntu libxine1-all-plugins_1.1.11.1-1ubuntu3.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-al l-plugins_1.1.11.1-1ubuntu3.4_all.deb


• Ubuntu libxine1-bin_1.1.11.1-1ubuntu3.4_lpia.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-bin_1.1.11.1-1ub untu3.4_lpia.deb


• Ubuntu libxine1-console_1.1.11.1-1ubuntu3.4_lpia.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-console_1.1.11.1 -1ubuntu3.4_lpia.deb


• Ubuntu libxine1-dbg_1.1.11.1-1ubuntu3.4_lpia.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-dbg_1.1.11.1-1ub untu3.4_lpia.deb


• Ubuntu libxine1-doc_1.1.11.1-1ubuntu3.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-doc_1. 1.11.1-1ubuntu3.4_all.deb


• Ubuntu libxine1-ffmpeg_1.1.11.1-1ubuntu3.4_lpia.deb
  http://ports.ubuntu.com/pool/universe/x/xine-lib/libxine1-ffmpeg_1.1.1 1.1-1ubuntu3.4_lpia.deb


• Ubuntu libxine1-gnome_1.1.11.1-1ubuntu3.4_lpia.deb
  http://ports.ubuntu.com/pool/universe/x/xine-lib/libxine1-gnome_1.1.11 .1-1ubuntu3.4_lpia.deb


• Ubuntu libxine1-misc-plugins_1.1.11.1-1ubuntu3.4_lpia.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-misc-plugins_1.1 .11.1-1ubuntu3.4_lpia.deb


• Ubuntu libxine1-plugins_1.1.11.1-1ubuntu3.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-pl ugins_1.1.11.1-1ubuntu3.4_all.deb


• Ubuntu libxine1-x_1.1.11.1-1ubuntu3.4_lpia.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-x_1.1.11.1-1ubun tu3.4_lpia.deb


• Ubuntu libxine1_1.1.11.1-1ubuntu3.4_lpia.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1_1.1.11.1-1ubuntu 3.4_lpia.deb

Ubuntu Ubuntu Linux 6.06 LTS i386

• Ubuntu libxine-dev_1.1.1+ubuntu2-7.12_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine-dev_1.1 .1+ubuntu2-7.12_i386.deb


• Ubuntu libxine-main1_1.1.1+ubuntu2-7.12_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine-main1_1 .1.1+ubuntu2-7.12_i386.deb

Ubuntu Ubuntu Linux 8.10 lpia

• Ubuntu libxine-dev_1.1.15-0ubuntu3.3_lpia.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine-dev_1.1.15-0ubunt u3.3_lpia.deb


• Ubuntu libxine1-all-plugins_1.1.15-0ubuntu3.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-al l-plugins_1.1.15-0ubuntu3.3_all.deb


• Ubuntu libxine1-bin_1.1.15-0ubuntu3.3_lpia.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-bin_1.1.15-0ubun tu3.3_lpia.deb


• Ubuntu libxine1-console_1.1.15-0ubuntu3.3_lpia.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-console_1.1.15-0 ubuntu3.3_lpia.deb


• Ubuntu libxine1-dbg_1.1.15-0ubuntu3.3_lpia.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-dbg_1.1.15-0ubun tu3.3_lpia.deb


• Ubuntu libxine1-doc_1.1.15-0ubuntu3.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-doc_1. 1.15-0ubuntu3.3_all.deb


• Ubuntu libxine1-ffmpeg_1.1.15-0ubuntu3.3_lpia.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-ffmpeg_1.1.15-0u buntu3.3_lpia.deb


• Ubuntu libxine1-gnome_1.1.15-0ubuntu3.3_lpia.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-gnome_1.1.15-0ub untu3.3_lpia.deb


• Ubuntu libxine1-misc-plugins_1.1.15-0ubuntu3.3_lpia.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-misc-plugins_1.1 .15-0ubuntu3.3_lpia.deb


• Ubuntu libxine1-plugins_1.1.15-0ubuntu3.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-pl ugins_1.1.15-0ubuntu3.3_all.deb


• Ubuntu libxine1-x_1.1.15-0ubuntu3.3_lpia.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-x_1.1.15-0ubuntu 3.3_lpia.deb


• Ubuntu libxine1_1.1.15-0ubuntu3.3_lpia.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1_1.1.15-0ubuntu3. 3_lpia.deb

Ubuntu Ubuntu Linux 6.06 LTS amd64

• Ubuntu libxine-dev_1.1.1+ubuntu2-7.12_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine-dev_1.1 .1+ubuntu2-7.12_amd64.deb


• Ubuntu libxine-main1_1.1.1+ubuntu2-7.12_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine-main1_1 .1.1+ubuntu2-7.12_amd64.deb

Ubuntu Ubuntu Linux 8.10 sparc

• Ubuntu libxine-dev_1.1.15-0ubuntu3.3_sparc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine-dev_1.1.15-0ubunt u3.3_sparc.deb


• Ubuntu libxine1-all-plugins_1.1.15-0ubuntu3.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-al l-plugins_1.1.15-0ubuntu3.3_all.deb


• Ubuntu libxine1-bin_1.1.15-0ubuntu3.3_sparc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-bin_1.1.15-0ubun tu3.3_sparc.deb


• Ubuntu libxine1-console_1.1.15-0ubuntu3.3_sparc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-console_1.1.15-0 ubuntu3.3_sparc.deb


• Ubuntu libxine1-dbg_1.1.15-0ubuntu3.3_sparc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-dbg_1.1.15-0ubun tu3.3_sparc.deb


• Ubuntu libxine1-doc_1.1.15-0ubuntu3.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-doc_1. 1.15-0ubuntu3.3_all.deb


• Ubuntu libxine1-ffmpeg_1.1.15-0ubuntu3.3_sparc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-ffmpeg_1.1.15-0u buntu3.3_sparc.deb


• Ubuntu libxine1-gnome_1.1.15-0ubuntu3.3_sparc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-gnome_1.1.15-0ub untu3.3_sparc.deb


• Ubuntu libxine1-misc-plugins_1.1.15-0ubuntu3.3_sparc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-misc-plugins_1.1 .15-0ubuntu3.3_sparc.deb


• Ubuntu libxine1-plugins_1.1.15-0ubuntu3.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-pl ugins_1.1.15-0ubuntu3.3_all.deb


• Ubuntu libxine1-x_1.1.15-0ubuntu3.3_sparc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1-x_1.1.15-0ubuntu 3.3_sparc.deb


• Ubuntu libxine1_1.1.15-0ubuntu3.3_sparc.deb
  http://ports.ubuntu.com/pool/main/x/xine-lib/libxine1_1.1.15-0ubuntu3. 3_sparc.deb

Mandriva Linux Mandrake 2009.0

• Mandriva libxine-devel-1.1.15-2.2mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libxine1-1.1.15-2.2mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-aa-1.1.15-2.2mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-caca-1.1.15-2.2mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-dxr3-1.1.15-2.2mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-esd-1.1.15-2.2mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-flac-1.1.15-2.2mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-gnomevfs-1.1.15-2.2mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-image-1.1.15-2.2mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-jack-1.1.15-2.2mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-plugins-1.1.15-2.2mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-pulse-1.1.15-2.2mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-sdl-1.1.15-2.2mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-smb-1.1.15-2.2mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-wavpack-1.1.15-2.2mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 8.04 LTS i386

• Ubuntu libxine-dev_1.1.11.1-1ubuntu3.4_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine-dev_1.1 .11.1-1ubuntu3.4_i386.deb


• Ubuntu libxine1-all-plugins_1.1.11.1-1ubuntu3.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-al l-plugins_1.1.11.1-1ubuntu3.4_all.deb


• Ubuntu libxine1-bin_1.1.11.1-1ubuntu3.4_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-bin_1. 1.11.1-1ubuntu3.4_i386.deb


• Ubuntu libxine1-console_1.1.11.1-1ubuntu3.4_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-consol e_1.1.11.1-1ubuntu3.4_i386.deb


• Ubuntu libxine1-dbg_1.1.11.1-1ubuntu3.4_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-dbg_1. 1.11.1-1ubuntu3.4_i386.deb


• Ubuntu libxine1-doc_1.1.11.1-1ubuntu3.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-doc_1. 1.11.1-1ubuntu3.4_all.deb


• Ubuntu libxine1-ffmpeg_1.1.11.1-1ubuntu3.4_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-ff mpeg_1.1.11.1-1ubuntu3.4_i386.deb


• Ubuntu libxine1-gnome_1.1.11.1-1ubuntu3.4_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-gn ome_1.1.11.1-1ubuntu3.4_i386.deb


• Ubuntu libxine1-misc-plugins_1.1.11.1-1ubuntu3.4_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-misc-p lugins_1.1.11.1-1ubuntu3.4_i386.deb


• Ubuntu libxine1-plugins_1.1.11.1-1ubuntu3.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-pl ugins_1.1.11.1-1ubuntu3.4_all.deb


• Ubuntu libxine1-x_1.1.11.1-1ubuntu3.4_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-x_1.1. 11.1-1ubuntu3.4_i386.deb


• Ubuntu libxine1_1.1.11.1-1ubuntu3.4_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1_1.1.11 .1-1ubuntu3.4_i386.deb

Mandriva Linux Mandrake 2009.0 x86_64

• Mandriva lib64xine-devel-1.1.15-2.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64xine1-1.1.15-2.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-aa-1.1.15-2.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-caca-1.1.15-2.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-dxr3-1.1.15-2.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-esd-1.1.15-2.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-flac-1.1.15-2.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-gnomevfs-1.1.15-2.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-image-1.1.15-2.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-jack-1.1.15-2.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-plugins-1.1.15-2.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-pulse-1.1.15-2.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-sdl-1.1.15-2.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-smb-1.1.15-2.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-wavpack-1.1.15-2.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 8.10 amd64

• Ubuntu libxine-dev_1.1.15-0ubuntu3.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine-dev_1.1 .15-0ubuntu3.3_amd64.deb


• Ubuntu libxine1-all-plugins_1.1.15-0ubuntu3.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-al l-plugins_1.1.15-0ubuntu3.3_all.deb


• Ubuntu libxine1-bin_1.1.15-0ubuntu3.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-bin_1. 1.15-0ubuntu3.3_amd64.deb


• Ubuntu libxine1-console_1.1.15-0ubuntu3.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-consol e_1.1.15-0ubuntu3.3_amd64.deb


• Ubuntu libxine1-dbg_1.1.15-0ubuntu3.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-dbg_1. 1.15-0ubuntu3.3_amd64.deb


• Ubuntu libxine1-doc_1.1.15-0ubuntu3.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-doc_1. 1.15-0ubuntu3.3_all.deb


• Ubuntu libxine1-ffmpeg_1.1.15-0ubuntu3.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-ffmpeg _1.1.15-0ubuntu3.3_amd64.deb


• Ubuntu libxine1-gnome_1.1.15-0ubuntu3.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-gnome_ 1.1.15-0ubuntu3.3_amd64.deb


• Ubuntu libxine1-misc-plugins_1.1.15-0ubuntu3.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-misc-p lugins_1.1.15-0ubuntu3.3_amd64.deb


• Ubuntu libxine1-plugins_1.1.15-0ubuntu3.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/x/xine-lib/libxine1-pl ugins_1.1.15-0ubuntu3.3_all.deb


• Ubuntu libxine1-x_1.1.15-0ubuntu3.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1-x_1.1. 15-0ubuntu3.3_amd64.deb


• Ubuntu libxine1_1.1.15-0ubuntu3.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1_1.1.15 -0ubuntu3.3_amd64.deb

MandrakeSoft Corporate Server 3.0 x86_64

• Mandriva lib64xine1-1-0.rc3.6.18.C30mdk.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64xine1-devel-1-0.rc3.6.18.C30mdk.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-aa-1-0.rc3.6.18.C30mdk.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-arts-1-0.rc3.6.18.C30mdk.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-esd-1-0.rc3.6.18.C30mdk.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-flac-1-0.rc3.6.18.C30mdk.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-gnomevfs-1-0.rc3.6.18.C30mdk.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-plugins-1-0.rc3.6.18.C30mdk.x86_64.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Corporate Server 3.0

• Mandriva libxine1-1-0.rc3.6.18.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libxine1-devel-1-0.rc3.6.18.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-aa-1-0.rc3.6.18.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-arts-1-0.rc3.6.18.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-dxr3-1-0.rc3.6.18.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-esd-1-0.rc3.6.18.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-flac-1-0.rc3.6.18.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-gnomevfs-1-0.rc3.6.18.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva xine-plugins-1-0.rc3.6.18.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/

xine-lib STTS QuickTime Atom Remote Buffer Overflow Vulnerability

References:

• Bug 224 - xine-lib Quicktime STTS Atom Integer Overflow (xine)
  
• Vendor Home Page (xine)
  
• [TKADV2009-005] xine-lib Quicktime STTS Atom Integer Overflow (Tobias Klein )
  
• xine-lib Quicktime STTS Atom Integer Overflow (Tobias Klein)