Unrated severityNVD Advisory· Published Feb 23, 2009· Updated Apr 23, 2026
CVE-2009-0698
CVE-2009-0698
Description
Integer overflow in the 4xm demuxer (demuxers/demux_4xm.c) in xine-lib 1.1.16.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a 4X movie file with a large current_track value, a similar issue to CVE-2009-0385.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
9- sourceforge.net/project/shownotes.phpnvdPatch
- bugs.xine-project.org/show_bug.cginvd
- lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.htmlnvd
- www.mandriva.com/security/advisoriesnvd
- www.mandriva.com/security/advisoriesnvd
- www.securityfocus.com/archive/1/500514/100/0/threadednvd
- www.trapkit.de/advisories/TKADV2009-004.txtnvd
- www.ubuntu.com/usn/USN-746-1nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/48954nvd
News mentions
0No linked articles in our index yet.