Xine-lib
—
filed under:
Security
An overflow was found in the Speex decoder that could lead to a crash or possible execution of arbitrary code.Xine-lib <= 1.1.12 was also found to be vulnerable to a stack-based bufferoverflow in the NES demuxer thanks to milw0rm.com).
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1686
Xine-lib 1.1.12 is now available from the testing repository.
