Skip to content
Noroxi

xine records

50 published records for vendor xine.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
38
With a fix record
44%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    50 records
    • CVE-2004-1300
      43Plan

      Buffer overflow in the open_aiff_file function in demux_aiff.c for xine-lib (libxine) 1-rc7 allows remote attackers to execute arbitrary cod

      CriticalCVSS 10.0Proof of conceptEPSS 9%

      xine · xine-libJan 10, 2005

    • CVE-2004-1034
      42Plan

      Buffer overflow in the http_open function in Kaffeine before 0.5, whose code is also used in gxine before 0.3.3, allows remote attackers to

      CriticalCVSS 10.0No exploitEPSS 5%

      kaffeine · kaffeine playerMar 1, 2005

    • CVE-2008-5237
      42Plan

      Multiple integer overflows in xine-lib 1.1.12, and other 1.1.15 and earlier versions, allow remote attackers to cause a denial of service (c

      CriticalCVSS 10.0No exploitEPSS 5%

      xine · xineNov 25, 2008

    • CVE-2004-1187
      42Plan

      Heap-based buffer overflow in the pnm_get_chunk function for xine 0.99.2, and other packages such as MPlayer that use the same code, allows

      CriticalCVSS 10.0No exploitEPSS 5%

      mplayer · mplayerJan 10, 2005

    • CVE-2004-0433
      42Plan

      Multiple buffer overflows in the Real-Time Streaming Protocol (RTSP) client for (1) MPlayer before 1.0pre4 and (2) xine lib (xine-lib) befor

      CriticalCVSS 10.0No exploitEPSS 5%

      mplayer · mplayerAug 18, 2004

    • CVE-2007-0254
      41Plan

      Format string vulnerability in the errors_create_window function in errors.c in xine-ui allows attackers to execute arbitrary code via unkno

      CriticalCVSS 10.0No exploitEPSS 3%

      xine · xine-uiJan 16, 2007

    • CVE-2008-5244
      41Plan

      Unspecified vulnerability in xine-lib before 1.1.15 has unknown impact and attack vectors related to libfaad.

      CriticalCVSS 10.0No exploitEPSS 2%

      xine · xine-libNov 25, 2008

    • CVE-2004-1188
      41Plan

      The pnm_get_chunk function in xine 0.99.2 and earlier, and other packages such as MPlayer that use the same code, does not properly verify t

      CriticalCVSS 10.0No exploitEPSS 1%

      mplayer · mplayerJan 10, 2005

    • CVE-2008-1686
      39Monitor

      Array index vulnerability in Speex 1.1.12 and earlier, as used in libfishsound 0.9.0 and earlier, including Illiminable DirectShow Filters a

      CriticalCVSS 9.3No exploitEPSS 6%

      xine · xine-libApr 8, 2008

    • CVE-2008-5234
      39Monitor

      Multiple heap-based buffer overflows in xine-lib 1.1.12, and other versions before 1.1.15, allow remote attackers to execute arbitrary code

      CriticalCVSS 9.3No exploitEPSS 5%

      xine · xine-libNov 25, 2008

    • CVE-2008-5236
      39Monitor

      Multiple heap-based buffer overflows in xine-lib 1.1.12, and other 1.1.15 and earlier versions, allow remote attackers to execute arbitrary

      CriticalCVSS 9.3No exploitEPSS 5%

      xine · xineNov 25, 2008

    • CVE-2008-5246
      39Monitor

      Multiple heap-based buffer overflows in xine-lib before 1.1.15 allow remote attackers to execute arbitrary code via vectors that send ID3 da

      CriticalCVSS 9.3No exploitEPSS 5%

      xine · xine-libNov 25, 2008

    • CVE-2008-5235
      38Monitor

      Heap-based buffer overflow in the demux_real_send_chunk function in src/demuxers/demux_real.c in xine-lib before 1.1.15 allows remote attack

      CriticalCVSS 9.3No exploitEPSS 4%

      xine · xineNov 25, 2008

    • CVE-2007-0255
      38Monitor

      XINE 0.99.4 allows user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a

      CriticalCVSS 9.3No exploitEPSS 4%

      xine · xineJan 16, 2007

    • CVE-2008-5245
      38Monitor

      xine-lib before 1.1.15 performs V4L video frame preallocation before ascertaining the required length, which has unknown impact and attack v

      CriticalCVSS 9.3No exploitEPSS 1%

      xine · xine-libNov 25, 2008

    • CVE-2008-1878
      35Monitor

      Stack-based buffer overflow in the demux_nsf_send_chunk function in src/demuxers/demux_nsf.c in xine-lib 1.1.12 and earlier allows remote at

      HighCVSS 7.5Proof of conceptEPSS 15%

      xine · xine-libApr 17, 2008

    • CVE-2006-1664
      34Monitor

      Buffer overflow in xine_list_delete_current in libxine 1.14 and earlier, as distributed in xine-lib 1.1.1 and earlier, allows remote attacke

      HighCVSS 7.5Proof of conceptEPSS 14%

      xine · xine-libApr 7, 2006

    • CVE-2006-1905
      34Monitor

      Multiple format string vulnerabilities in xiTK (xitk/main.c) in xine 0.99.3 allow remote attackers to execute arbitrary code via format stri

      HighCVSS 7.5Proof of conceptEPSS 14%

      xine · xineApr 20, 2006

    • CVE-2005-2967
      33Monitor

      Format string vulnerability in input_cdda.c in xine-lib 1-beta through 1-beta 3, 1-rc, 1.0 through 1.0.2, and 1.1.1 allows remote servers to

      HighCVSS 7.5Proof of conceptEPSS 9%

      xine · xine-libOct 14, 2005

    • CVE-2006-6172
      32Monitor

      Buffer overflow in the asmrp_eval function in the RealMedia RTSP stream handler (asmrp.c) for Real Media input plugin, as used in (1) xine/x

      HighCVSS 7.5No exploitEPSS 5%

      xine · real media input pluginNov 30, 2006

    • CVE-2008-0486
      32Monitor

      Array index vulnerability in libmpdemux/demux_audio.c in MPlayer 1.0rc2 and SVN before r25917, and possibly earlier versions, as used in Xin

      HighCVSS 7.5No exploitEPSS 5%

      mplayer · mplayerFeb 5, 2008

    • CVE-2005-1195
      31Monitor

      Multiple heap-based buffer overflows in the code used to handle (1) MMS over TCP (MMST) streams or (2) RealMedia RTSP streams in xine-lib be

      HighCVSS 7.5No exploitEPSS 4%

      xine · xine-libMay 2, 2005

    • CVE-2008-0238
      31Monitor

      Multiple heap-based buffer overflows in the rmff_dump_cont function in input/libreal/rmff.c in xine-lib 1.1.9 allow remote attackers to exec

      HighCVSS 7.5No exploitEPSS 4%

      xine · xine-libJan 11, 2008

    • CVE-2004-1379
      31Monitor

      Heap-based buffer overflow in the DVD subpicture decoder in xine xine-lib 1-rc5 and earlier allows remote attackers to execute arbitrary cod

      HighCVSS 7.5No exploitEPSS 3%

      xine · xineSep 16, 2004

    • CVE-2009-0698
      31Monitor

      Integer overflow in the 4xm demuxer (demuxers/demux_4xm.c) in xine-lib 1.1.16.1 allows remote attackers to cause a denial of service (crash)

      HighCVSS 7.5No exploitEPSS 3%

      xine · xine-libFeb 23, 2009