libxine -- multiple vulnerabilities

Multiple vulnerabilities were fixed in libxine 1.1.16.2.

Tobias Klein reports:

FFmpeg contains a type conversion vulnerability while parsing malformed 4X movie files. The vulnerability may be exploited by a (remote) attacker to execute arbitrary code in the context of FFmpeg or an application using the FFmpeg library.

Note: A similar issue also affects xine-lib < version 1.1.16.2.

[source]

xine developers report:

• Fix broken size checks in various input plugins (ref. CVE-2008-5239).
• More malloc checking (ref. CVE-2008-5240).

[source]