CVE-2008-0073: Xine Xine-Lib

Medium severity, CVSS 6.8. EPSS: 9.3% chance of exploitation in the next 30 days.

Array index error in the sdpplin_parse function in input/libreal/sdpplin.c in xine-lib 1.1.10.1 allows remote RTSP servers to execute arbitrary code via a large streamid SDP parameter.

Affected products

• Xine Xine-Lib: version 1.1.10.1 only

Published 2008-03-24. Last modified 2026-06-16.