Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

xine-lib: code execution

Package(s):

xine-lib

CVE #(s):

CVE-2006-4799

Created:

October 4, 2006

Updated:

November 21, 2006

Description:

The xine-lib package does not properly validate AVI headers, enabling an attacker to run arbitrary code via a specially crafted AVI file.

Alerts:

Debian	DSA-1215-1	2006-11-20
Ubuntu	USN-358-1	2006-10-04

(Log in to post comments)