Vulnerability in Kaffeine Player
CVE-2006-0051
Buffer overflow in playlistimport.cpp in Kaffeine Player 0.4.2 through 0.7.1 allows user-assisted attackers to execute arbitrary code via long HTTP request headers when Kaffeine is "fetching remote playlists", which triggers the overflow in the http_peek function.
EPSS: 0.035 (87.9th percentile) — read the EPSS interpretation.
Affected products
- Kaffeine Kaffeine_player — versions 0.4.2, 0.4.3, 0.4.3b
- N/a — versions n/a
References
- security@debian.org (x_refsource_UBUNTU, vendor-advisory)
- security@debian.org (vdb-entry, x_refsource_VUPEN)
- security@debian.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
- security@debian.org (x_refsource_SECUNIA, third-party-advisory)
- security@debian.org (vdb-entry, x_refsource_BID)
- security@debian.org (vendor-advisory, x_refsource_MANDRIVA)
- security@debian.org (vendor-advisory, x_refsource_DEBIAN)
- security@debian.org (vdb-entry, x_refsource_SECTRACK)
- security@debian.org (vdb-entry, x_refsource_XF)
- security@debian.org (vendor-advisory, x_refsource_GENTOO)