{
   configurations: [
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:0.9.13:*:*:*:*:*:*:*",
                     matchCriteriaId: "1DF7BC3F-20B1-461A-A799-8A77F3D8CC8E",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "B8D402CB-4DED-4525-AF38-B5EC73C39E55",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1.0.1:*:*:*:*:*:*:*",
                     matchCriteriaId: "A905719D-4520-4374-B3A7-55034728B85C",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1.0.2:*:*:*:*:*:*:*",
                     matchCriteriaId: "2899EF34-824B-4893-8636-64A83EC5885B",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1.1.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "FAB10333-6C25-4359-BB3F-D76468170825",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
      },
   ],
   cveTags: [],
   descriptions: [
      {
         lang: "en",
         value: "Format string vulnerability in input_cdda.c in xine-lib 1-beta through 1-beta 3, 1-rc, 1.0 through 1.0.2, and 1.1.1 allows remote servers to execute arbitrary code via format string specifiers in metadata in CDDB server responses when the victim plays a CD.",
      },
   ],
   id: "CVE-2005-2967",
   lastModified: "2024-11-21T00:00:49.643",
   metrics: {
      cvssMetricV2: [
         {
            acInsufInfo: false,
            baseSeverity: "HIGH",
            cvssData: {
               accessComplexity: "LOW",
               accessVector: "NETWORK",
               authentication: "NONE",
               availabilityImpact: "PARTIAL",
               baseScore: 7.5,
               confidentialityImpact: "PARTIAL",
               integrityImpact: "PARTIAL",
               vectorString: "AV:N/AC:L/Au:N/C:P/I:P/A:P",
               version: "2.0",
            },
            exploitabilityScore: 10,
            impactScore: 6.4,
            obtainAllPrivilege: false,
            obtainOtherPrivilege: false,
            obtainUserPrivilege: true,
            source: "nvd@nist.gov",
            type: "Primary",
            userInteractionRequired: false,
         },
      ],
   },
   published: "2005-10-14T10:02:00.000",
   references: [
      {
         source: "security@debian.org",
         url: "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0196.html",
      },
      {
         source: "security@debian.org",
         url: "http://secunia.com/advisories/17097",
      },
      {
         source: "security@debian.org",
         tags: [
            "Patch",
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/17099/",
      },
      {
         source: "security@debian.org",
         url: "http://secunia.com/advisories/17111",
      },
      {
         source: "security@debian.org",
         url: "http://secunia.com/advisories/17132",
      },
      {
         source: "security@debian.org",
         url: "http://secunia.com/advisories/17162",
      },
      {
         source: "security@debian.org",
         url: "http://secunia.com/advisories/17179",
      },
      {
         source: "security@debian.org",
         url: "http://secunia.com/advisories/17282",
      },
      {
         source: "security@debian.org",
         url: "http://slackware.com/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.415454",
      },
      {
         source: "security@debian.org",
         tags: [
            "Patch",
            "Vendor Advisory",
         ],
         url: "http://www.debian.org/security/2005/dsa-863",
      },
      {
         source: "security@debian.org",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://www.gentoo.org/security/en/glsa/glsa-200510-08.xml",
      },
      {
         source: "security@debian.org",
         url: "http://www.mandriva.com/security/advisories?name=MDKSA-2005:180",
      },
      {
         source: "security@debian.org",
         url: "http://www.novell.com/linux/security/advisories/2005_24_sr.html",
      },
      {
         source: "security@debian.org",
         url: "http://www.osvdb.org/19892",
      },
      {
         source: "security@debian.org",
         tags: [
            "Exploit",
            "Patch",
         ],
         url: "http://www.securityfocus.com/bid/15044",
      },
      {
         source: "security@debian.org",
         url: "http://www.ubuntu.com/usn/usn-196-1",
      },
      {
         source: "security@debian.org",
         tags: [
            "Patch",
            "Vendor Advisory",
         ],
         url: "http://xinehq.de/index.php/security/XSA-2005-1",
      },
      {
         source: "security@debian.org",
         url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/22545",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0196.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://secunia.com/advisories/17097",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Patch",
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/17099/",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://secunia.com/advisories/17111",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://secunia.com/advisories/17132",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://secunia.com/advisories/17162",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://secunia.com/advisories/17179",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://secunia.com/advisories/17282",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://slackware.com/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.415454",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Patch",
            "Vendor Advisory",
         ],
         url: "http://www.debian.org/security/2005/dsa-863",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://www.gentoo.org/security/en/glsa/glsa-200510-08.xml",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.mandriva.com/security/advisories?name=MDKSA-2005:180",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.novell.com/linux/security/advisories/2005_24_sr.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.osvdb.org/19892",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Exploit",
            "Patch",
         ],
         url: "http://www.securityfocus.com/bid/15044",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.ubuntu.com/usn/usn-196-1",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Patch",
            "Vendor Advisory",
         ],
         url: "http://xinehq.de/index.php/security/XSA-2005-1",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/22545",
      },
   ],
   sourceIdentifier: "security@debian.org",
   vulnStatus: "Modified",
   weaknesses: [
      {
         description: [
            {
               lang: "en",
               value: "NVD-CWE-Other",
            },
         ],
         source: "nvd@nist.gov",
         type: "Primary",
      },
   ],
}

{
   configurations: [
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:a:mplayer:mplayer:1.02rc2:*:*:*:*:*:*:*",
                     matchCriteriaId: "9395B548-2F82-4543-A100-86B56A52B394",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1.1.10:*:*:*:*:*:*:*",
                     matchCriteriaId: "AFC149FA-B916-4844-AD98-B7827116C803",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
      },
   ],
   cveTags: [],
   descriptions: [
      {
         lang: "en",
         value: "Array index vulnerability in libmpdemux/demux_audio.c in MPlayer 1.0rc2 and SVN before r25917, and possibly earlier versions, as used in Xine-lib 1.1.10, might allow remote attackers to execute arbitrary code via a crafted FLAC tag, which triggers a buffer overflow.",
      },
      {
         lang: "es",
         value: "Vulnerabilidad de índice de array en libmpdemux/demux_audio.c de MPlayer 1.0rc2 y SVN antes de r25917, y posiblemente versiones anteriores, como se utilizó en Xine-lib 1.1.10. Podría permitir a atacantes remotos ejecutar código de su elección a través de una etiqueta FLAC manipulada que provoca un desbordamiento de búfer.",
      },
   ],
   id: "CVE-2008-0486",
   lastModified: "2024-11-21T00:42:12.860",
   metrics: {
      cvssMetricV2: [
         {
            acInsufInfo: false,
            baseSeverity: "HIGH",
            cvssData: {
               accessComplexity: "LOW",
               accessVector: "NETWORK",
               authentication: "NONE",
               availabilityImpact: "PARTIAL",
               baseScore: 7.5,
               confidentialityImpact: "PARTIAL",
               integrityImpact: "PARTIAL",
               vectorString: "AV:N/AC:L/Au:N/C:P/I:P/A:P",
               version: "2.0",
            },
            exploitabilityScore: 10,
            impactScore: 6.4,
            obtainAllPrivilege: false,
            obtainOtherPrivilege: true,
            obtainUserPrivilege: false,
            source: "nvd@nist.gov",
            type: "Primary",
            userInteractionRequired: false,
         },
      ],
   },
   published: "2008-02-05T12:00:00.000",
   references: [
      {
         source: "cve@mitre.org",
         url: "http://bugs.gentoo.org/show_bug.cgi?id=209106",
      },
      {
         source: "cve@mitre.org",
         url: "http://bugs.xine-project.org/show_bug.cgi?id=38",
      },
      {
         source: "cve@mitre.org",
         url: "http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060033.html",
      },
      {
         source: "cve@mitre.org",
         url: "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html",
      },
      {
         source: "cve@mitre.org",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/28779",
      },
      {
         source: "cve@mitre.org",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/28801",
      },
      {
         source: "cve@mitre.org",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/28918",
      },
      {
         source: "cve@mitre.org",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/28955",
      },
      {
         source: "cve@mitre.org",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/28956",
      },
      {
         source: "cve@mitre.org",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/28989",
      },
      {
         source: "cve@mitre.org",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/29141",
      },
      {
         source: "cve@mitre.org",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/29307",
      },
      {
         source: "cve@mitre.org",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/29323",
      },
      {
         source: "cve@mitre.org",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/29601",
      },
      {
         source: "cve@mitre.org",
         url: "http://secunia.com/advisories/31393",
      },
      {
         source: "cve@mitre.org",
         url: "http://security.gentoo.org/glsa/glsa-200802-12.xml",
      },
      {
         source: "cve@mitre.org",
         url: "http://security.gentoo.org/glsa/glsa-200803-16.xml",
      },
      {
         source: "cve@mitre.org",
         url: "http://securityreason.com/securityalert/3608",
      },
      {
         source: "cve@mitre.org",
         url: "http://sourceforge.net/project/shownotes.php?group_id=9655&release_id=574735",
      },
      {
         source: "cve@mitre.org",
         tags: [
            "Exploit",
         ],
         url: "http://www.coresecurity.com/?action=item&id=2103",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.debian.org/security/2008/dsa-1496",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.debian.org/security/2008/dsa-1536",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.mandriva.com/security/advisories?name=MDVSA-2008:045",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.mandriva.com/security/advisories?name=MDVSA-2008:046",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.mplayerhq.hu/design7/news.html",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.securityfocus.com/archive/1/487501/100/0/threaded",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.securityfocus.com/bid/27441",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.ubuntu.com/usn/usn-635-1",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.vupen.com/english/advisories/2008/0406/references",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.vupen.com/english/advisories/2008/0421",
      },
      {
         source: "cve@mitre.org",
         url: "https://bugzilla.redhat.com/show_bug.cgi?id=431541",
      },
      {
         source: "cve@mitre.org",
         url: "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00395.html",
      },
      {
         source: "cve@mitre.org",
         url: "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00442.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://bugs.gentoo.org/show_bug.cgi?id=209106",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://bugs.xine-project.org/show_bug.cgi?id=38",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060033.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/28779",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/28801",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/28918",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/28955",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/28956",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/28989",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/29141",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/29307",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/29323",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/29601",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://secunia.com/advisories/31393",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://security.gentoo.org/glsa/glsa-200802-12.xml",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://security.gentoo.org/glsa/glsa-200803-16.xml",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://securityreason.com/securityalert/3608",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://sourceforge.net/project/shownotes.php?group_id=9655&release_id=574735",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Exploit",
         ],
         url: "http://www.coresecurity.com/?action=item&id=2103",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.debian.org/security/2008/dsa-1496",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.debian.org/security/2008/dsa-1536",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.mandriva.com/security/advisories?name=MDVSA-2008:045",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.mandriva.com/security/advisories?name=MDVSA-2008:046",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.mplayerhq.hu/design7/news.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.securityfocus.com/archive/1/487501/100/0/threaded",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.securityfocus.com/bid/27441",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.ubuntu.com/usn/usn-635-1",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.vupen.com/english/advisories/2008/0406/references",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.vupen.com/english/advisories/2008/0421",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://bugzilla.redhat.com/show_bug.cgi?id=431541",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00395.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00442.html",
      },
   ],
   sourceIdentifier: "cve@mitre.org",
   vulnStatus: "Modified",
   weaknesses: [
      {
         description: [
            {
               lang: "en",
               value: "CWE-189",
            },
         ],
         source: "nvd@nist.gov",
         type: "Primary",
      },
   ],
}

{
   configurations: [
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:*:*:*:*:*:*:*:*",
                     matchCriteriaId: "69EF5A16-DDEC-4B06-8A6E-E02594FC6FED",
                     versionEndIncluding: "1.1.15",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:0.9.13:*:*:*:*:*:*:*",
                     matchCriteriaId: "1DF7BC3F-20B1-461A-A799-8A77F3D8CC8E",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1:rc0a:*:*:*:*:*:*",
                     matchCriteriaId: "BC32E976-3FB3-44DE-89EE-FF0E89D97090",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1:rc1:*:*:*:*:*:*",
                     matchCriteriaId: "336D216E-5C30-4328-A422-DE134CABA091",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1:rc2:*:*:*:*:*:*",
                     matchCriteriaId: "39B6FDDB-139E-4CAC-A1C9-69E4AB542357",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1:rc3:*:*:*:*:*:*",
                     matchCriteriaId: "CCC58298-4DD7-47C4-BFA7-04596B21D646",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1:rc3a:*:*:*:*:*:*",
                     matchCriteriaId: "EB72C6CE-4D90-42FD-BFAF-AB31EBC34BF6",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1:rc3b:*:*:*:*:*:*",
                     matchCriteriaId: "3AA7BF0D-063D-4FD4-9AF2-69A0DF31579D",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1:rc3c:*:*:*:*:*:*",
                     matchCriteriaId: "5BEFC0C7-1D8D-421B-B193-8A574AC8C712",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1:rc4:*:*:*:*:*:*",
                     matchCriteriaId: "42736C09-AF59-45F7-A324-2A725F8C0AEB",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1:rc4a:*:*:*:*:*:*",
                     matchCriteriaId: "30F3E90C-01A5-4085-8BA4-B5FA05BEA791",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1:rc5:*:*:*:*:*:*",
                     matchCriteriaId: "91ACDCA2-F0CD-4133-85A1-FC95E703CB90",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1:rc6a:*:*:*:*:*:*",
                     matchCriteriaId: "58B3AEE5-1A56-464E-9EB2-F06E25FA5D90",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1:rc7:*:*:*:*:*:*",
                     matchCriteriaId: "EEB5AC92-03F5-44F2-89CC-B6E8BA69C55C",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1:rc8:*:*:*:*:*:*",
                     matchCriteriaId: "5AC68CC2-969C-4596-AA38-AE10BFE1D5BC",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "B8D402CB-4DED-4525-AF38-B5EC73C39E55",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1.0.1:*:*:*:*:*:*:*",
                     matchCriteriaId: "A905719D-4520-4374-B3A7-55034728B85C",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1.0.2:*:*:*:*:*:*:*",
                     matchCriteriaId: "2899EF34-824B-4893-8636-64A83EC5885B",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1.0.3a:*:*:*:*:*:*:*",
                     matchCriteriaId: "8EB8D295-B589-4E88-8FEE-DDD1591D9189",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1.1.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "FAB10333-6C25-4359-BB3F-D76468170825",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1.1.1:*:*:*:*:*:*:*",
                     matchCriteriaId: "2377493B-8CC0-414B-AA5F-B7777C852195",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1.1.2:*:*:*:*:*:*:*",
                     matchCriteriaId: "877230F8-6040-4CE3-A882-1290D19D27CC",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1.1.3:*:*:*:*:*:*:*",
                     matchCriteriaId: "401AE3C4-3829-487D-B66E-F71705BDD3FB",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1.1.4:*:*:*:*:*:*:*",
                     matchCriteriaId: "46BF90AB-3B32-4899-8179-BDB9EB449760",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1.1.5:*:*:*:*:*:*:*",
                     matchCriteriaId: "69CE0C90-2DD1-49D2-AE4C-1D21B81EF812",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1.1.6:*:*:*:*:*:*:*",
                     matchCriteriaId: "3F2AF7B5-09C3-4E32-B981-E0D9F88E387C",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1.1.7:*:*:*:*:*:*:*",
                     matchCriteriaId: "C94CF963-7DA9-455C-BB7E-2EE9AACD6B51",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1.1.8:*:*:*:*:*:*:*",
                     matchCriteriaId: "E515D538-80FA-4069-B466-1EC4F84EE5A5",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1.1.9:*:*:*:*:*:*:*",
                     matchCriteriaId: "64546B22-3230-413A-BE51-E51F54B4A39B",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1.1.9.1:*:*:*:*:*:*:*",
                     matchCriteriaId: "686115E3-6BC0-4E9E-A0A7-9896F639FDE6",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1.1.10:*:*:*:*:*:*:*",
                     matchCriteriaId: "AFC149FA-B916-4844-AD98-B7827116C803",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1.1.10.1:*:*:*:*:*:*:*",
                     matchCriteriaId: "D2BBF4E9-6090-4ED3-8A12-09396E660505",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1.1.11:*:*:*:*:*:*:*",
                     matchCriteriaId: "AA642532-365F-4981-BA09-A56D3628271C",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1.1.11.1:*:*:*:*:*:*:*",
                     matchCriteriaId: "C34F27CC-0D88-42C0-93B4-87C1A4FA3DE8",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1.1.12:*:*:*:*:*:*:*",
                     matchCriteriaId: "7B75F992-1E85-491D-99FF-2ABE4228B88D",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1.1.13:*:*:*:*:*:*:*",
                     matchCriteriaId: "1DFE3B5A-2AF7-4F0B-9364-A06DD19F4BF7",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1.1.14:*:*:*:*:*:*:*",
                     matchCriteriaId: "C68EFD39-5F34-41DD-9897-A28A6BD190A2",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1_beta1:*:*:*:*:*:*:*",
                     matchCriteriaId: "4C87793C-6577-4E67-BBFD-768FAF1BF88D",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1_beta2:*:*:*:*:*:*:*",
                     matchCriteriaId: "DFE9819F-A620-41A6-A102-41746457753F",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1_beta3:*:*:*:*:*:*:*",
                     matchCriteriaId: "A7D6474F-C678-498C-9A61-287E2FDD8B2D",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1_beta4:*:*:*:*:*:*:*",
                     matchCriteriaId: "06402BDD-77EA-447A-8C34-E1A0F41D0628",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1_beta5:*:*:*:*:*:*:*",
                     matchCriteriaId: "7387773A-81F1-464A-9489-E103C51BED46",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1_beta6:*:*:*:*:*:*:*",
                     matchCriteriaId: "A03194CD-2CFA-4F11-90DE-3573BA06B6DC",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1_beta7:*:*:*:*:*:*:*",
                     matchCriteriaId: "1C39D002-E323-423D-8895-9179DFDF6535",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1_beta8:*:*:*:*:*:*:*",
                     matchCriteriaId: "73E621C7-A5BA-4D71-9D57-4311360FF3A6",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1_beta9:*:*:*:*:*:*:*",
                     matchCriteriaId: "B08810F9-377D-49C4-A9A8-E2EE42EDF2F5",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1_beta10:*:*:*:*:*:*:*",
                     matchCriteriaId: "6AA12911-93D8-4DFE-A31C-FEB9E7F7ADD6",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1_beta11:*:*:*:*:*:*:*",
                     matchCriteriaId: "9C13E4FD-A874-4366-A426-19665B43F1DD",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1_beta12:*:*:*:*:*:*:*",
                     matchCriteriaId: "75965D14-6EFC-4F1D-B343-FD593FB37048",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
      },
   ],
   cveTags: [],
   descriptions: [
      {
         lang: "en",
         value: "Unspecified vulnerability in xine-lib before 1.1.15 has unknown impact and attack vectors related to libfaad.  NOTE: due to the lack of details, it is not clear whether this is an issue in xine-lib or in libfaad.",
      },
      {
         lang: "es",
         value: "Vulnerabilidad no especificada en xine-lib anterior a v1.1.15, tiene un impacto desconocido y vectores de ataque relacionados con libfaad. NOTA: Debido a la falta de detalles, no está claro si es una vulnerabilidad que afecta a xine-lib o a libfaad.",
      },
   ],
   id: "CVE-2008-5244",
   lastModified: "2024-11-21T00:53:39.033",
   metrics: {
      cvssMetricV2: [
         {
            acInsufInfo: true,
            baseSeverity: "HIGH",
            cvssData: {
               accessComplexity: "LOW",
               accessVector: "NETWORK",
               authentication: "NONE",
               availabilityImpact: "COMPLETE",
               baseScore: 10,
               confidentialityImpact: "COMPLETE",
               integrityImpact: "COMPLETE",
               vectorString: "AV:N/AC:L/Au:N/C:C/I:C/A:C",
               version: "2.0",
            },
            exploitabilityScore: 10,
            impactScore: 10,
            obtainAllPrivilege: true,
            obtainOtherPrivilege: false,
            obtainUserPrivilege: false,
            source: "nvd@nist.gov",
            type: "Primary",
            userInteractionRequired: false,
         },
      ],
   },
   published: "2008-11-26T01:30:00.670",
   references: [
      {
         source: "cve@mitre.org",
         url: "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html",
      },
      {
         source: "cve@mitre.org",
         url: "http://securitytracker.com/id?1020703",
      },
      {
         source: "cve@mitre.org",
         url: "http://sourceforge.net/project/shownotes.php?release_id=619869",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://securitytracker.com/id?1020703",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://sourceforge.net/project/shownotes.php?release_id=619869",
      },
   ],
   sourceIdentifier: "cve@mitre.org",
   vulnStatus: "Modified",
   weaknesses: [
      {
         description: [
            {
               lang: "en",
               value: "NVD-CWE-noinfo",
            },
         ],
         source: "nvd@nist.gov",
         type: "Primary",
      },
   ],
}

{
   configurations: [
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:*:*:*:*:*:*:*:*",
                     matchCriteriaId: "5EA01448-09E3-4DA9-A817-BFD7A4460F66",
                     versionEndIncluding: "1.1.14",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:0.9.13:*:*:*:*:*:*:*",
                     matchCriteriaId: "1DF7BC3F-20B1-461A-A799-8A77F3D8CC8E",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1:rc0a:*:*:*:*:*:*",
                     matchCriteriaId: "BC32E976-3FB3-44DE-89EE-FF0E89D97090",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1:rc1:*:*:*:*:*:*",
                     matchCriteriaId: "336D216E-5C30-4328-A422-DE134CABA091",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1:rc2:*:*:*:*:*:*",
                     matchCriteriaId: "39B6FDDB-139E-4CAC-A1C9-69E4AB542357",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1:rc3:*:*:*:*:*:*",
                     matchCriteriaId: "CCC58298-4DD7-47C4-BFA7-04596B21D646",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1:rc3a:*:*:*:*:*:*",
                     matchCriteriaId: "EB72C6CE-4D90-42FD-BFAF-AB31EBC34BF6",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1:rc3b:*:*:*:*:*:*",
                     matchCriteriaId: "3AA7BF0D-063D-4FD4-9AF2-69A0DF31579D",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1:rc3c:*:*:*:*:*:*",
                     matchCriteriaId: "5BEFC0C7-1D8D-421B-B193-8A574AC8C712",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1:rc4:*:*:*:*:*:*",
                     matchCriteriaId: "42736C09-AF59-45F7-A324-2A725F8C0AEB",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1:rc4a:*:*:*:*:*:*",
                     matchCriteriaId: "30F3E90C-01A5-4085-8BA4-B5FA05BEA791",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1:rc5:*:*:*:*:*:*",
                     matchCriteriaId: "91ACDCA2-F0CD-4133-85A1-FC95E703CB90",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1:rc6a:*:*:*:*:*:*",
                     matchCriteriaId: "58B3AEE5-1A56-464E-9EB2-F06E25FA5D90",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1:rc7:*:*:*:*:*:*",
                     matchCriteriaId: "EEB5AC92-03F5-44F2-89CC-B6E8BA69C55C",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1:rc8:*:*:*:*:*:*",
                     matchCriteriaId: "5AC68CC2-969C-4596-AA38-AE10BFE1D5BC",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "B8D402CB-4DED-4525-AF38-B5EC73C39E55",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1.0.1:*:*:*:*:*:*:*",
                     matchCriteriaId: "A905719D-4520-4374-B3A7-55034728B85C",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1.0.2:*:*:*:*:*:*:*",
                     matchCriteriaId: "2899EF34-824B-4893-8636-64A83EC5885B",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1.0.3a:*:*:*:*:*:*:*",
                     matchCriteriaId: "8EB8D295-B589-4E88-8FEE-DDD1591D9189",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1.1.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "FAB10333-6C25-4359-BB3F-D76468170825",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1.1.1:*:*:*:*:*:*:*",
                     matchCriteriaId: "2377493B-8CC0-414B-AA5F-B7777C852195",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1.1.2:*:*:*:*:*:*:*",
                     matchCriteriaId: "877230F8-6040-4CE3-A882-1290D19D27CC",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1.1.3:*:*:*:*:*:*:*",
                     matchCriteriaId: "401AE3C4-3829-487D-B66E-F71705BDD3FB",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1.1.4:*:*:*:*:*:*:*",
                     matchCriteriaId: "46BF90AB-3B32-4899-8179-BDB9EB449760",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1.1.5:*:*:*:*:*:*:*",
                     matchCriteriaId: "69CE0C90-2DD1-49D2-AE4C-1D21B81EF812",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1.1.6:*:*:*:*:*:*:*",
                     matchCriteriaId: "3F2AF7B5-09C3-4E32-B981-E0D9F88E387C",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1.1.7:*:*:*:*:*:*:*",
                     matchCriteriaId: "C94CF963-7DA9-455C-BB7E-2EE9AACD6B51",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1.1.8:*:*:*:*:*:*:*",
                     matchCriteriaId: "E515D538-80FA-4069-B466-1EC4F84EE5A5",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1.1.9:*:*:*:*:*:*:*",
                     matchCriteriaId: "64546B22-3230-413A-BE51-E51F54B4A39B",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1.1.9.1:*:*:*:*:*:*:*",
                     matchCriteriaId: "686115E3-6BC0-4E9E-A0A7-9896F639FDE6",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1.1.10:*:*:*:*:*:*:*",
                     matchCriteriaId: "AFC149FA-B916-4844-AD98-B7827116C803",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1.1.10.1:*:*:*:*:*:*:*",
                     matchCriteriaId: "D2BBF4E9-6090-4ED3-8A12-09396E660505",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1.1.11:*:*:*:*:*:*:*",
                     matchCriteriaId: "AA642532-365F-4981-BA09-A56D3628271C",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1.1.11.1:*:*:*:*:*:*:*",
                     matchCriteriaId: "C34F27CC-0D88-42C0-93B4-87C1A4FA3DE8",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1.1.12:*:*:*:*:*:*:*",
                     matchCriteriaId: "7B75F992-1E85-491D-99FF-2ABE4228B88D",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1.1.13:*:*:*:*:*:*:*",
                     matchCriteriaId: "1DFE3B5A-2AF7-4F0B-9364-A06DD19F4BF7",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1_beta1:*:*:*:*:*:*:*",
                     matchCriteriaId: "4C87793C-6577-4E67-BBFD-768FAF1BF88D",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1_beta2:*:*:*:*:*:*:*",
                     matchCriteriaId: "DFE9819F-A620-41A6-A102-41746457753F",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1_beta3:*:*:*:*:*:*:*",
                     matchCriteriaId: "A7D6474F-C678-498C-9A61-287E2FDD8B2D",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1_beta4:*:*:*:*:*:*:*",
                     matchCriteriaId: "06402BDD-77EA-447A-8C34-E1A0F41D0628",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1_beta5:*:*:*:*:*:*:*",
                     matchCriteriaId: "7387773A-81F1-464A-9489-E103C51BED46",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1_beta6:*:*:*:*:*:*:*",
                     matchCriteriaId: "A03194CD-2CFA-4F11-90DE-3573BA06B6DC",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1_beta7:*:*:*:*:*:*:*",
                     matchCriteriaId: "1C39D002-E323-423D-8895-9179DFDF6535",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1_beta8:*:*:*:*:*:*:*",
                     matchCriteriaId: "73E621C7-A5BA-4D71-9D57-4311360FF3A6",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1_beta9:*:*:*:*:*:*:*",
                     matchCriteriaId: "B08810F9-377D-49C4-A9A8-E2EE42EDF2F5",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1_beta10:*:*:*:*:*:*:*",
                     matchCriteriaId: "6AA12911-93D8-4DFE-A31C-FEB9E7F7ADD6",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1_beta11:*:*:*:*:*:*:*",
                     matchCriteriaId: "9C13E4FD-A874-4366-A426-19665B43F1DD",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1_beta12:*:*:*:*:*:*:*",
                     matchCriteriaId: "75965D14-6EFC-4F1D-B343-FD593FB37048",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
      },
   ],
   cveTags: [],
   descriptions: [
      {
         lang: "en",
         value: "xine-lib before 1.1.15 performs V4L video frame preallocation before ascertaining the required length, which has unknown impact and attack vectors, possibly related to a buffer overflow in the open_video_capture_device function in src/input/input_v4l.c.",
      },
      {
         lang: "es",
         value: "xine-lib anterior a 1.1.15 realiza marcos de video V4L preasignados antes del establecimiento de la longitud requerida, la cuál tiene un impacto y vectores de ataque desconocidos, posiblemente relacionado con un desbordamiento de búfer en la función  open_video_capture_device en src/input/input_v4l.c.",
      },
   ],
   id: "CVE-2008-5245",
   lastModified: "2024-11-21T00:53:39.180",
   metrics: {
      cvssMetricV2: [
         {
            acInsufInfo: false,
            baseSeverity: "HIGH",
            cvssData: {
               accessComplexity: "MEDIUM",
               accessVector: "NETWORK",
               authentication: "NONE",
               availabilityImpact: "COMPLETE",
               baseScore: 9.3,
               confidentialityImpact: "COMPLETE",
               integrityImpact: "COMPLETE",
               vectorString: "AV:N/AC:M/Au:N/C:C/I:C/A:C",
               version: "2.0",
            },
            exploitabilityScore: 8.6,
            impactScore: 10,
            obtainAllPrivilege: true,
            obtainOtherPrivilege: false,
            obtainUserPrivilege: false,
            source: "nvd@nist.gov",
            type: "Primary",
            userInteractionRequired: true,
         },
      ],
   },
   published: "2008-11-26T01:30:00.687",
   references: [
      {
         source: "cve@mitre.org",
         url: "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html",
      },
      {
         source: "cve@mitre.org",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/31502",
      },
      {
         source: "cve@mitre.org",
         url: "http://securitytracker.com/id?1020703",
      },
      {
         source: "cve@mitre.org",
         url: "http://sourceforge.net/project/shownotes.php?release_id=619869",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.mandriva.com/security/advisories?name=MDVSA-2009:020",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.securityfocus.com/bid/30698",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.vupen.com/english/advisories/2008/2382",
      },
      {
         source: "cve@mitre.org",
         url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/44470",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/31502",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://securitytracker.com/id?1020703",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://sourceforge.net/project/shownotes.php?release_id=619869",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.mandriva.com/security/advisories?name=MDVSA-2009:020",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.securityfocus.com/bid/30698",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.vupen.com/english/advisories/2008/2382",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/44470",
      },
   ],
   sourceIdentifier: "cve@mitre.org",
   vulnStatus: "Modified",
   weaknesses: [
      {
         description: [
            {
               lang: "en",
               value: "CWE-119",
            },
            {
               lang: "en",
               value: "NVD-CWE-noinfo",
            },
         ],
         source: "nvd@nist.gov",
         type: "Primary",
      },
   ],
}

{
   configurations: [
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:a:mimms:mimms:0.0.9:*:*:*:*:*:*:*",
                     matchCriteriaId: "8336443A-DE31-4DD7-AA6A-82D7B33332A6",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1.1.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "FAB10333-6C25-4359-BB3F-D76468170825",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
      },
   ],
   cveTags: [],
   descriptions: [
      {
         lang: "en",
         value: "Stack-based buffer overflow in libmms, as used by (a) MiMMS 0.0.9 and (b) xine-lib 1.1.0 and earlier, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via the (1) send_command, (2) string_utf16, (3) get_data, and (4) get_media_packet functions, and possibly other functions.",
      },
      {
         lang: "es",
         value: "Desbordamiento de búfer basado en pila en libmms, utilizado por (a) MiMMs v0.0.9 y (b) xine-lib v1.1.0 y versiones anteriores, permite a atacantes remotos causar una denegación de servicio (cuelgue de aplicación) y posiblemente ejecutar código arbitrario a través de (1) send_command, (2) string_utf16, (3) get_data, y (4) funciones get_media_packet ,y  posiblemente otras funciones.\r\n\r\n",
      },
   ],
   id: "CVE-2006-2200",
   lastModified: "2024-11-21T00:10:46.747",
   metrics: {
      cvssMetricV2: [
         {
            acInsufInfo: false,
            baseSeverity: "MEDIUM",
            cvssData: {
               accessComplexity: "HIGH",
               accessVector: "NETWORK",
               authentication: "NONE",
               availabilityImpact: "PARTIAL",
               baseScore: 5.1,
               confidentialityImpact: "PARTIAL",
               integrityImpact: "PARTIAL",
               vectorString: "AV:N/AC:H/Au:N/C:P/I:P/A:P",
               version: "2.0",
            },
            exploitabilityScore: 4.9,
            impactScore: 6.4,
            obtainAllPrivilege: false,
            obtainOtherPrivilege: false,
            obtainUserPrivilege: true,
            source: "nvd@nist.gov",
            type: "Primary",
            userInteractionRequired: true,
         },
      ],
   },
   published: "2006-06-28T01:45:00.000",
   references: [
      {
         source: "security@debian.org",
         url: "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=374577",
      },
      {
         source: "security@debian.org",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/20749",
      },
      {
         source: "security@debian.org",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/20948",
      },
      {
         source: "security@debian.org",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/20964",
      },
      {
         source: "security@debian.org",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/21023",
      },
      {
         source: "security@debian.org",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/21036",
      },
      {
         source: "security@debian.org",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/21139",
      },
      {
         source: "security@debian.org",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/23218",
      },
      {
         source: "security@debian.org",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/23512",
      },
      {
         source: "security@debian.org",
         url: "http://security.gentoo.org/glsa/glsa-200607-07.xml",
      },
      {
         source: "security@debian.org",
         url: "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.433842",
      },
      {
         source: "security@debian.org",
         url: "http://sourceforge.net/project/shownotes.php?release_id=468432",
      },
      {
         source: "security@debian.org",
         url: "http://www.mandriva.com/security/advisories?name=MDKSA-2006:117",
      },
      {
         source: "security@debian.org",
         url: "http://www.mandriva.com/security/advisories?name=MDKSA-2006:121",
      },
      {
         source: "security@debian.org",
         url: "http://www.securityfocus.com/bid/18608",
      },
      {
         source: "security@debian.org",
         url: "http://www.ubuntu.com/usn/usn-309-1",
      },
      {
         source: "security@debian.org",
         url: "http://www.ubuntu.com/usn/usn-315-1",
      },
      {
         source: "security@debian.org",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://www.vupen.com/english/advisories/2006/2487",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=374577",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/20749",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/20948",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/20964",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/21023",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/21036",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/21139",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/23218",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/23512",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://security.gentoo.org/glsa/glsa-200607-07.xml",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.433842",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://sourceforge.net/project/shownotes.php?release_id=468432",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.mandriva.com/security/advisories?name=MDKSA-2006:117",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.mandriva.com/security/advisories?name=MDKSA-2006:121",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.securityfocus.com/bid/18608",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.ubuntu.com/usn/usn-309-1",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.ubuntu.com/usn/usn-315-1",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://www.vupen.com/english/advisories/2006/2487",
      },
   ],
   sourceIdentifier: "security@debian.org",
   vulnStatus: "Modified",
   weaknesses: [
      {
         description: [
            {
               lang: "en",
               value: "CWE-119",
            },
         ],
         source: "nvd@nist.gov",
         type: "Primary",
      },
   ],
}

{
   configurations: [
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:a:xine:xine-lib:1_rc7:*:*:*:*:*:*:*",
                     matchCriteriaId: "74D09DD6-7878-4136-AE31-A45CF9234061",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
      },
   ],
   cveTags: [],
   descriptions: [
      {
         lang: "en",
         value: "Buffer overflow in the open_aiff_file function in demux_aiff.c for xine-lib (libxine) 1-rc7 allows remote attackers to execute arbitrary code via a crafted AIFF file.",
      },
   ],
   id: "CVE-2004-1300",
   lastModified: "2024-11-20T23:50:32.650",
   metrics: {
      cvssMetricV2: [
         {
            acInsufInfo: false,
            baseSeverity: "HIGH",
            cvssData: {
               accessComplexity: "LOW",
               accessVector: "NETWORK",
               authentication: "NONE",
               availabilityImpact: "COMPLETE",
               baseScore: 10,
               confidentialityImpact: "COMPLETE",
               integrityImpact: "COMPLETE",
               vectorString: "AV:N/AC:L/Au:N/C:C/I:C/A:C",
               version: "2.0",
            },
            exploitabilityScore: 10,
            impactScore: 10,
            obtainAllPrivilege: true,
            obtainOtherPrivilege: false,
            obtainUserPrivilege: false,
            source: "nvd@nist.gov",
            type: "Primary",
            userInteractionRequired: false,
         },
      ],
   },
   published: "2005-01-10T05:00:00.000",
   references: [
      {
         source: "cve@mitre.org",
         tags: [
            "Exploit",
            "Vendor Advisory",
         ],
         url: "http://tigger.uic.edu/~jlongs2/holes/xine-lib.txt",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.mandriva.com/security/advisories?name=MDKSA-2005:011",
      },
      {
         source: "cve@mitre.org",
         url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/18611",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Exploit",
            "Vendor Advisory",
         ],
         url: "http://tigger.uic.edu/~jlongs2/holes/xine-lib.txt",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.mandriva.com/security/advisories?name=MDKSA-2005:011",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/18611",
      },
   ],
   sourceIdentifier: "cve@mitre.org",
   vulnStatus: "Modified",
   weaknesses: [
      {
         description: [
            {
               lang: "en",
               value: "NVD-CWE-Other",
            },
         ],
         source: "nvd@nist.gov",
         type: "Primary",
      },
   ],
}