FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2006-1905

This CVE name corresponds to:

Entered	Topic
2006-04-23	xine -- multiple remote string vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2006-1905 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2006-1905
Phase	Assigned(20060420)

Description

Multiple format string vulnerabilities in xiTK (xitk/main.c) in xine 0.99.3 allow remote attackers to execute arbitrary code via format string specifiers in a long filename on an EXTINFO line in a playlist file.

References

Source	Reference
BUGTRAQ	20060418 Remote Xine Format String Vulnerability
MISC	http://open-security.org/advisories/16
CONFIRM	http://sourceforge.net/mailarchive/message.php?msg_id=15429845
GENTOO	GLSA-200604-15
MANDRIVA	MDKSA-2006:085
SUSE	SUSE-SA:2006:025
BID	17579
VUPEN	ADV-2006-1432
OSVDB	24747
SECTRACK	1015959
SECUNIA	19671
SECUNIA	19854
SECUNIA	20066
XF	xine-playlist-format-string(25851)