CVE Feed

    Dashboard / CVE / CVE-2008-0073

    CVE-2008-0073

    Array index error in the sdpplin_parse function in input/libreal/sdpplin.c in xine-lib 1.1.10.1 allows remote RTSP servers to execute arbitrary code via a large streamid SDP parameter.

    Published:Mar 24, 2008
    Last Modified:Apr 23, 2026
    EPS:Mar 24, 2008
    EPSS Score:0.01773
    CVSS Score:6.8

    Affected Products

    Vendor
    Redhat
    Product
    Fedora
    Vendor
    Xine
    Product
    Xine-lib

    Exploits

    https://www.exploit-db.com/exploits/5498

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2018-19139 (CVSS 5.5) — An issue has been found in JasPer 2.0.14. There is a memory leak in jas_malloc.c when called from jpc_unk_getp…
    CVE-2014-9278 (CVSS 4) — The OpenSSH server, as used in Fedora and Red Hat Enterprise Linux 7 and when running in a Kerberos environmen…
    CVE-2011-1011 (CVSS 6.9) — The seunshare_mount function in sandbox/seunshare.c in seunshare in certain Red Hat packages of policycoreutil…
    CVE-2011-0008 (CVSS 6.9) — A certain Fedora patch for parse.c in sudo before 1.7.4p5-1.fc14 on Fedora 14 does not properly interpret a sy…
    CVE-2009-3080 (CVSS 7.2) — Array index error in the gdth_read_event function in drivers/scsi/gdth.c in the Linux kernel before 2.6.32-rc8…
    CVE-2010-4695 (CVSS 5) — A certain Fedora patch for gif2png.c in gif2png 2.5.1 and 2.5.2, as distributed in gif2png-2.5.1-1200.fc12 on …
    CVE-2009-1573 (CVSS 4.6) — xvfb-run 1.6.1 in Debian GNU/Linux, Ubuntu, Fedora 10, and possibly other operating systems place the magic co…
    CVE-2008-6755 (CVSS 5) — ZoneMinder 1.23.3 on Fedora 10 sets the ownership of /etc/zm.conf to the apache user account, and sets the per…
    CVE-2008-6560 (CVSS 7.8) — Buffer overflow in CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9 and Red Hat Enterprise Linux (RHEL)…
    CVE-2009-0180 (CVSS 7.5) — Certain Fedora build scripts for nfs-utils before 1.1.2-9.fc9 on Fedora 9, and before 1.1.4-6.fc10 on Fedora 1…

    References

    http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00008.html
    http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html
    http://secunia.com/advisories/28694
    http://secunia.com/advisories/29392
    http://secunia.com/advisories/29472
    http://secunia.com/advisories/29503
    http://secunia.com/advisories/29578
    http://secunia.com/advisories/29601
    http://secunia.com/advisories/29740
    http://secunia.com/advisories/29766
    http://secunia.com/advisories/29800
    http://secunia.com/advisories/30581
    http://secunia.com/advisories/31372
    http://secunia.com/advisories/31393
    http://secunia.com/secunia_research/2008-10/
    http://security.gentoo.org/glsa/glsa-200804-25.xml
    http://security.gentoo.org/glsa/glsa-200808-01.xml
    http://sourceforge.net/project/shownotes.php?release_id=585488&group_id=9655
    http://wiki.videolan.org/Changelog/0.8.6f
    http://www.debian.org/security/2008/dsa-1536
    http://www.debian.org/security/2008/dsa-1543
    http://www.mandriva.com/security/advisories?name=MDVSA-2008:178
    http://www.mandriva.com/security/advisories?name=MDVSA-2008:219
    http://www.securityfocus.com/bid/28312
    http://www.securitytracker.com/id?1019682
    http://www.slackware.org/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.392408
    http://www.ubuntu.com/usn/usn-635-1
    http://www.videolan.org/security/sa0803.php
    http://www.vupen.com/english/advisories/2008/0923
    http://www.vupen.com/english/advisories/2008/0985
    http://xinehq.de/index.php/news
    https://exchange.xforce.ibmcloud.com/vulnerabilities/41339
    https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00143.html
    https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00456.html
    http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00008.html
    http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html
    http://secunia.com/advisories/28694
    http://secunia.com/advisories/29392
    http://secunia.com/advisories/29472
    http://secunia.com/advisories/29503
    http://secunia.com/advisories/29578
    http://secunia.com/advisories/29601
    http://secunia.com/advisories/29740
    http://secunia.com/advisories/29766
    http://secunia.com/advisories/29800
    http://secunia.com/advisories/30581
    http://secunia.com/advisories/31372
    http://secunia.com/advisories/31393
    http://secunia.com/secunia_research/2008-10/
    http://security.gentoo.org/glsa/glsa-200804-25.xml
    http://security.gentoo.org/glsa/glsa-200808-01.xml
    http://sourceforge.net/project/shownotes.php?release_id=585488&group_id=9655
    http://wiki.videolan.org/Changelog/0.8.6f
    http://www.debian.org/security/2008/dsa-1536
    http://www.debian.org/security/2008/dsa-1543
    http://www.mandriva.com/security/advisories?name=MDVSA-2008:178
    http://www.mandriva.com/security/advisories?name=MDVSA-2008:219
    http://www.securityfocus.com/bid/28312
    http://www.securitytracker.com/id?1019682
    http://www.slackware.org/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.392408
    http://www.ubuntu.com/usn/usn-635-1
    http://www.videolan.org/security/sa0803.php
    http://www.vupen.com/english/advisories/2008/0923
    http://www.vupen.com/english/advisories/2008/0985
    http://xinehq.de/index.php/news
    https://exchange.xforce.ibmcloud.com/vulnerabilities/41339
    https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00143.html
    https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00456.html

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High