CVE-2008-1482
xine-lib <= 1.1.11 - Heap-Based Buffer Overflow via Crafted Media Files
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-1482. PoCs published by Luigi Auriemma.
AI-analyzed exploit summary This exploit demonstrates multiple heap-based buffer overflow vulnerabilities in xine-lib 1.1.11 by crafting malicious media files (FLV, MOV, RM, etc.) that trigger overflows when parsed. It includes specific payloads for different file formats to exploit the vulnerabilities.
Description
Multiple integer overflows in xine-lib 1.1.11 and earlier allow remote attackers to trigger heap-based buffer overflows and possibly execute arbitrary code via (1) a crafted .FLV file, which triggers an overflow in demuxers/demux_flv.c; (2) a crafted .MOV file, which triggers an overflow in demuxers/demux_qt.c; (3) a crafted .RM file, which triggers an overflow in demuxers/demux_real.c; (4) a crafted .MVE file, which triggers an overflow in demuxers/demux_wc3movie.c; (5) a crafted .MKV file, which triggers an overflow in demuxers/ebml.c; or (6) a crafted .CAK file, which triggers an overflow in demuxers/demux_film.c.
Exploits (1)
This exploit demonstrates multiple heap-based buffer overflow vulnerabilities in xine-lib 1.1.11 by crafting malicious media files (FLV, MOV, RM, etc.) that trigger overflows when parsed. It includes specific payloads for different file formats to exploit the vulnerabilities.