CVE-2008-1964

xine-lib - Stack-based Buffer Overflow in NSF Header Copyright Field

Title source: llm
STIX 2.1

Description

Stack-based buffer overflow in the demux_nsf_send_headers function in src/demuxers/demux_nsf.c in xine-lib allows remote attackers to have an unknown impact via a long copyright field in an NSF header in an NES Sound file, a different issue than CVE-2008-1878. NOTE: a third party claims that the copyright field always has a safe length

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/28908
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/491274/100/0/threaded
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/491248/100/0/threaded

Scores

EPSS 0.0175
EPSS Percentile 75.3%

Details

CWE
CWE-119
Status published
Products (1)
xinehq/xine_lib
Published Apr 25, 2008
Tracked Since Feb 18, 2026