paul Posted March 13, 2007 Report Share Posted March 13, 2007 The DS_VideoDecoder_Open function in DirectShow/DS_VideoDecoder.c in xine-lib does not set the biSize before use in a memcpy, which allows user-assisted remote attackers to cause a buffer overflow and possibly execute arbitrary code. Updated packages have been patched to address this issue. Link to comment Share on other sites More sharing options...
Recommended Posts