CVE-2009-0698

CVE-2009-0698 describes an integer overflow vulnerability in the 4xm demuxer of xine-lib 1.1.16.1, affecting the xine media player. This flaw allows remote attackers to trigger a denial of service (crash) and potentially execute arbitrary code by crafting a malicious 4X movie file with an oversized current_track value. With a CVSS score of 7.5, it is considered highly severe due to its network-based attack vector and low complexity, enabling potential partial confidentiality, integrity, and availability compromise. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.