Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Stack-based buffer overflow in the VideoCD (VCD) code in xine-lib 1-rc2 through 1-rc5, as derived from libcdio, allows attackers to execute arbitrary code via a VideoCD with an unterminated disk label.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Xine-lib VideoCD和文本字幕堆栈缓冲区溢出漏洞
Vulnerability Description
Xine是Linux系统下播放VCD/DVD的程序。 Xine-lib存在两个缓冲区溢出问题，本地攻击者可以利用这个漏洞以xine进程权限执行任意指令。 第一个漏洞是当应用程序从VideoCDs中读取恶意ISO磁盘标记时存在缓冲区溢出，第二个漏洞是在处理恶意文本字幕数据时存在缓冲区溢出。精心构建这两个数据可以覆盖重要内存结构，以xine进程权限执行任意指令。
CVSS Information
N/A
Vulnerability Type
N/A