Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
xine-lib 1.1.12, and other 1.1.15 and earlier versions, does not properly handle (a) negative and (b) zero values during unspecified read function calls in input_file.c, input_net.c, input_smb.c, and input_http.c, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via vectors such as (1) a file or (2) an HTTP response, which triggers consequences such as out-of-bounds reads and heap-based buffer overflows.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Xine缓冲区溢出漏洞
Vulnerability Description
Xine是一个类UNIX操作系统下的多媒体播放引擎。 不适当的操作 input_file.c, input_net.c, input_smb.c和input_http.c中read方法中negative和zero的值．允许远程攻击者造成拒绝服务攻击或执行任意远程代码．利用比如一个文件或http的回应．也可能引起读取数据泄露或堆栈溢出．
CVSS Information
N/A
Vulnerability Type
N/A