The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Heap-based buffer overflow in the rmff_dump_cont function in input/libreal/rmff.c in xine-lib 1.1.9 and earlier allows remote attackers to execute arbitrary code via the SDP Abstract attribute in an RTSP session, related to the rmff_dump_header function and related to disregarding the max field. NOTE: some of these details are obtained from third party information.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade libxine | Dec 10, 2025 | Jan 19, 2008 |
| Gentoo Linux | — | Upgrade media-libs/xine-lib. | Oct 30, 2017 | Jan 10, 2008 |
| Suse | — | Upgrade libxine1-32bitUpgrade libxine1-gnome-vfsUpgrade libxine1Upgrade libxine1-pulseUpgrade libxine-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libxine-main1Upgrade libxine1 | Nov 8, 2024 | Jan 10, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub