NetSight
IP …
high7.5Public exploit code

CVE-2008-1878

Stack-based buffer overflow in the demux_nsf_send_chunk function in src/demuxers/demux_nsf.c in xine-lib 1.1.12 and earlier allows remote attackers to cause a …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Stack-based buffer overflow in the demux_nsf_send_chunk function in src/demuxers/demux_nsf.c in xine-lib 1.1.12 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long NSF title.

Affected products

VendorProductAffected versions
XineXine-Lib
through 1.1.12
Versions 1.1.0, 1.1.1, 1.1.9, 1.1.10, 1.1.10.1

Weakness classification

CWE-119

References