CVE-2008-0225

no score yetEPSS 15%

xine xine-lib: no CVSS score yet. EPSS 15% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the rmff_dump_cont function in input/libreal/rmff.c in xine-lib 1.1.9 and earlier allows remote attackers to execute arbitrary code via the SDP Abstract attribute in an RTSP session, related to the rmff_dump_header function and related to disregarding the max field. NOTE: some of these details are obtained from third party information.

EPSS: 15% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2008-01-10
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

xine:xine-lib

References

http://aluigi.altervista.org/adv/xinermffhof-adv.txt
http://bugs.gentoo.org/show_bug.cgi?id=205197
http://secunia.com/advisories/28384
http://secunia.com/advisories/28489
http://secunia.com/advisories/28507

Check your stack JSON