LWN.net Logo

xine-lib: buffer overflow

Package(s):xine-lib CVE #(s):CVE-2006-2802
Created:June 9, 2006 Updated:September 29, 2006
Description: Federico L. Bossi Bonin discovered a buffer overflow in the HTTP input module. By tricking an user into opening a malicious remote media location, a remote attacker could exploit this to crash Xine library frontends (like totem-xine, gxine, or xine-ui) and possibly even execute arbitrary code with the user's privileges.
Alerts:
Mandriva MDKSA-2006:176 2006-09-28
Mandriva MDKSA-2006:175 2006-09-28
Mandriva MDKSA-2006:174 2006-09-28
Mandriva MDKSA-2006:173 2006-09-28
Gentoo 200609-08 2006-09-13
Slackware SSA:2006-207-04 2006-07-27
Debian DSA-1105-1 2006-07-07
Mandriva MDKSA-2006:108 2006-06-20
Ubuntu USN-295-1 2006-06-09

(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds