CVE-2009-0698

Integer overflow in the 4xm demuxer (demuxers/demux_4xm.c) in xine-lib 1.1.16.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a 4X movie file with a large current_track value, a similar issue to CVE-2009-0385.

Date published : 2009-02-23

http://www.securityfocus.com/archive/1/500514/100/0/threaded

http://bugs.xine-project.org/show_bug.cgi?id=205