Secunia

Tobias Klein has reported a vulnerability in xine-lib, which can be exploited by malicious people to potentially compromise a user's system.

The vulnerability is caused due to an integer overflow error in the processing of STTS Quicktime atoms. This can be exploited to cause a heap-based buffer overflow via a specially crafted Quicktime file.

Successful exploitation may allow execution of arbitrary code.

The vulnerability is reported in versions prior to 1.1.16.3.

Solution
Update to version 1.1.16.3.

Provided and/or discovered by
Tobias Klein

Changelog
Further details available in Customer Area

Original Advisory
Tobias Klein:
http://trapkit.de/advisories/TKADV2009-005.txt

Xine:
http://bugs.xine-project.org/show_bug.cgi?id=224

Deep Links
Links available in Customer Area