CVE-2008-0238

no score yetEPSS 4.2%

xine xine-lib: no CVSS score yet. EPSS 4.2% chance of exploitation in the next 30 days.

Multiple heap-based buffer overflows in the rmff_dump_cont function in input/libreal/rmff.c in xine-lib 1.1.9 allow remote attackers to execute arbitrary code via the SDP (1) Title, (2) Author, or (3) Copyright attribute, related to the rmff_dump_header function, different vectors than CVE-2008-0225. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

EPSS: 4.2% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2008-01-11
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

xine:xine-lib

References

http://bugs.gentoo.org/show_bug.cgi?id=205197
http://secunia.com/advisories/28384
http://secunia.com/advisories/28674
http://secunia.com/advisories/28955
http://secunia.com/advisories/31393

Check your stack JSON