Some vulnerabilities have been reported in xine-lib, which can potentially be exploited by malicious people to compromise a user's system.

1) A boundary error exists within the "open_flac_file()" function in src/demuxers/demux_flac.c. This can be exploited to corrupt memory via a specially crafted FLAC file.

This is related to vulnerability #1 in:
SA28779

2) A boundary error in src/demuxers/demux_matroska.c can be exploited to cause a buffer overflow via a specially crafted "Matroska" file.

Successful exploitation of the vulnerabilities may allow execution of arbitrary code.

The vulnerabilities are reported in version 1.1.10. Prior versions may also be affected.

Solution
Update to version 1.1.10.1.

Provided and/or discovered by
1) Damian Frizza and Alfredo Ortega, Core Security Technologies
2) Reported by the vendor.

Changelog
Further details available to Secunia VIM customers

Original Advisory
Core Security (via Full Disclosure):
http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060033.html

Xine:
http://sourceforge.net/project/shownotes.php?group_id=9655&release_id=574735
http://xinehq.de/index.php/security

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers