Description: Some vulnerabilities have been reported in xine-lib, which can potentially be exploited by malicious people to compromise a vulnerable system.
The vulnerabilities are caused due to boundary errors in the "DMO_VideoDecoder_Open()" function in src/libw32dll/dmo/DMO_VideoDecoder.c and in the "DS_VideoDecoder_Open()" function in src/libw32dll/DirectShow/DS_VideoDecoder.c. These can be exploited to cause heap based buffer overflows and may allow execution of arbitrary code via a specially crafted media file.
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.
Ideas, suggestions, and other feedback are most welcome.
