Summary
The host has xine-lib installed, which prone to multiple vulnerabilities.
Impact
Remote exploitation could allow execution of arbitrary code to cause head-based buffer overflow via a specially crafted RealAudio or Matroska file.
Impact Level : Application/System
Solution
Update to version 1.1.16.1 or later,
For updates refer to
http://www.linuxfromscratch.org/blfs/view/svn/multimedia/xine-lib.html
Insight
The flaws are due to overflow errors that exist in open_ra_file() in demux_realaudio.c, parse_block_group() in demux_matroska.c, and eal_parse_audio_specific_data() in demux_real.c methods.
Affected
xine-lib versions 1.1.15 and prior on Linux (All).
References
Updated on 2015-03-25
