Sign inStart freeBook a demo

Xine vulnerabilitiesNone on the known-exploited list.

Vendor
The short answer

Xine has 50 published vulnerabilities across 6 products in our catalogue. None of them is on the list of flaws known to be exploited today. The most affected product is Xine-Lib, with 38. If you run Xine software, patch the exploited flaws first.

See the exploited flaws

We keep watching the known-exploited list.

Products

Which Xine products have the most vulnerabilities?

Xine-Lib leads with 38 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.

  1. Xine-Lib38
  2. Xine14
  3. Gxine3
  4. Xine-UI2
  5. Real Media Input Plugin1
  6. Xine-Plugin1
Published vulnerabilities
Known exploited

Which Xine vulnerabilities are being exploited?

This is the list that matters most: flaws criminals are using now.

None of Xine's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.

Exploit likelihood

Which Xine flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.

50% or more10% to 49%Under 10%
  1. 15%
    CVE-2008-1878High

    Stack-based buffer overflow in the demux_nsf_send_chunk function in src/demuxers/demux_nsf.c in xine-lib 1.1.12 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary...

    CVSS7.5Published17 Apr 2008
  2. 15%
    CVE-2006-1664High

    Buffer overflow in xine_list_delete_current in libxine 1.14 and earlier, as distributed in xine-lib 1.1.1 and earlier, allows remote attackers to execute arbitrary code via a crafted MPEG stream.

    CVSS7.5Published7 Apr 2006
  3. 15%
    CVE-2008-0225Medium

    Heap-based buffer overflow in the rmff_dump_cont function in input/libreal/rmff.c in xine-lib 1.1.9 and earlier allows remote attackers to execute arbitrary code via the SDP Abstract attribute in an RTSP session,...

    CVSS6.4Published10 Jan 2008
  4. 15%
    CVE-2006-1905High

    Multiple format string vulnerabilities in xiTK (xitk/main.c) in xine 0.99.3 allow remote attackers to execute arbitrary code via format string specifiers in a long filename on an EXTINFO line in a playlist file.

    CVSS7.5Published20 Apr 2006
  5. 11%
    CVE-2006-2802Medium

    Buffer overflow in the HTTP Plugin (xineplug_inp_http.so) for xine-lib 1.1.1 allows remote attackers to cause a denial of service (application crash) via a long reply from an HTTP server, as demonstrated using gxine...

    CVSS5.0Published3 Jun 2006
  6. 10%
    CVE-2008-1110Medium

    Buffer overflow in demuxers/demux_asf.c (aka the ASF demuxer) in the xineplug_dmx_asf.so plugin in xine-lib before 1.1.10 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a...

    CVSS6.8Published29 Feb 2008
  7. 9.7%
    CVE-2005-2967High

    Format string vulnerability in input_cdda.c in xine-lib 1-beta through 1-beta 3, 1-rc, 1.0 through 1.0.2, and 1.1.1 allows remote servers to execute arbitrary code via format string specifiers in metadata in CDDB...

    CVSS7.5Published14 Oct 2005
  8. 9.5%
    CVE-2008-1482Medium

    Multiple integer overflows in xine-lib 1.1.11 and earlier allow remote attackers to trigger heap-based buffer overflows and possibly execute arbitrary code via (1) a crafted .FLV file, which triggers an overflow in...

    CVSS6.8Published24 Mar 2008
  9. 9.3%
    CVE-2008-0073Medium

    Array index error in the sdpplin_parse function in input/libreal/sdpplin.c in xine-lib 1.1.10.1 allows remote RTSP servers to execute arbitrary code via a large streamid SDP parameter.

    CVSS6.8Published24 Mar 2008
  10. 9.1%
    CVE-2004-1300Critical

    Buffer overflow in the open_aiff_file function in demux_aiff.c for xine-lib (libxine) 1-rc7 allows remote attackers to execute arbitrary code via a crafted AIFF file.

    CVSS10.0Published10 Jan 2005
Every product

All Xine products we track.

4 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.

This directory lists the 4 Xine products with at least one tracked version, of 6 in our catalogue.

Precursor Intelligence

Running Xine? We'll keep checking.

Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.

  1. Tell us what you runPick your software from a list, or let us work it out from your website.
  2. We match it to every flawOver 400,000 published flaws, checked against your list.
  3. Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
  4. Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Start free →Book a demo

Free plan, no card needed. Nothing to install.

FAQ

Common questions, answered plainly.

Something else? Talk to the team →

Our catalogue lists 50 published vulnerabilities across 6 products and 107 versions from Xine.

None of Xine's vulnerabilities is on the list of flaws known to be exploited today.

Xine-Lib, with 38 published vulnerabilities. Its own page lists the ones known to be exploited.

Create a Precursor Intelligence account and track the Xine products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.

Keep exploring