PT-2006-2889 · Xine · Xine

Ludwig Nussel · Published 2006-04-20 · Updated 2018-10-18 · CVE-2006-1905

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions xine version 0.99.3

Description The issue concerns multiple format string vulnerabilities that allow remote attackers to execute arbitrary code. This is achieved by using format string specifiers in a long filename on an EXTINFO line in a playlist file.

Recommendations For xine version 0.99.3, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2006-1905

Affected Products

Xine

References · 19

• 🔥 http://securityfocus.com/bid/17579 · Exploit
• 🔥 https://exploit-db.com/exploits/27670 · Exploit
• http://gentoo.org/security/en/glsa/glsa-200604-15.xml · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2006-1905 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-1905 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-1905 · Security Note
• http://novell.com/linux/security/advisories/2006_05_05.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2006-1905 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2006:085 · Vendor Advisory
• http://secunia.com/advisories/19671 · Note
• http://osvdb.org/24747 · Note
• http://securityfocus.com/archive/1/431251/100/0/threaded · Note
• http://vupen.com/english/advisories/2006/1432 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25851 · Note
• http://securitytracker.com/id?1015959 · Note