CVE-2008-1110: Xine Xine-Lib

Medium severity, CVSS 6.8. EPSS: 10.4% chance of exploitation in the next 30 days.

Buffer overflow in demuxers/demux_asf.c (aka the ASF demuxer) in the xineplug_dmx_asf.so plugin in xine-lib before 1.1.10 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a crafted ASF header. NOTE: this issue leads to a crash when an attack uses the CVE-2006-1664 exploit code, but it is different from CVE-2006-1664.

Affected products

• Xine Xine-Lib: up to and including 1.1.9
• Xine Xine-Plugin: up to and including 1.1.9

Published 2008-02-29. Last modified 2026-06-16.