Vulnerability in Xine Xine-Lib
CVE-2005-2967
Format string vulnerability in input_cdda.c in xine-lib 1-beta through 1-beta 3, 1-rc, 1.0 through 1.0.2, and 1.1.1 allows remote servers to execute arbitrary code via format string specifiers in metadata in CDDB server responses when the victim plays a CD.
EPSS: 0.097 (95.0th percentile) — read the EPSS interpretation.
Affected products
- Xine Xine-lib — versions 0.9.13, 1.0, 1.0.1
- N/a — versions n/a
References
- security@debian.org (Exploit, Patch, vdb-entry, x_refsource_BID)
- security@debian.org (x_refsource_SECUNIA, third-party-advisory)
- security@debian.org (vendor-advisory, x_refsource_MANDRIVA)
- security@debian.org (x_refsource_SECUNIA, third-party-advisory)
- security@debian.org (x_refsource_SECUNIA, third-party-advisory)
- security@debian.org (x_refsource_OSVDB, vdb-entry)
- security@debian.org (vendor-advisory, x_refsource_SLACKWARE)
- security@debian.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
- security@debian.org (vendor-advisory, Patch, x_refsource_DEBIAN, Vendor Advisory)
- security@debian.org (mailing-list, x_refsource_FULLDISC)