← Database

CVE-2008-0073

MEDIUM CVSS: 6.8 Published: 2008-03-24 Modified: 2026-06-16

Description

Array index error in the sdpplin_parse function in input/libreal/sdpplin.c in xine-lib 1.1.10.1 allows remote RTSP servers to execute arbitrary code via a large streamid SDP parameter.

Affected Platforms

Xine Xine-LibRedhat Fedora

Weakness Type

CWE-189

References