Description
Buffer overflow in demuxers/demux_asf.c (aka the ASF demuxer) in the xineplug_dmx_asf.so plugin in xine-lib before 1.1.10 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a crafted ASF header. NOTE: this issue leads to a crash when an attack uses the CVE-2006-1664 exploit code, but it is different from CVE-2006-1664.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Federico L. Bossi Bonin · perldoslinux
https://www.exploit-db.com/exploits/1641
References (12)
Scores
EPSS
0.0807
EPSS Percentile
92.2%
Details
CWE
CWE-119
Status
published
Products (2)
xine/xine-lib
< 1.1.9
xine/xine-plugin
< 1.1.9
Published
Feb 29, 2008
Tracked Since
Feb 18, 2026