FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2006-2200

This CVE name corresponds to:

Entered Topic
2006-12-07 libxine -- multiple buffer overflow vulnerabilities
2006-09-22 libmms -- stack-based buffer overflow

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

Details

Type Candidate
Name CVE-2006-2200
Phase Assigned(20060504)

Description

Stack-based buffer overflow in libmms, as used by (a) MiMMS 0.0.9 and (b) xine-lib 1.1.0 and earlier, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via the (1) send_command, (2) string_utf16, (3) get_data, and (4) get_media_packet functions, and possibly other functions.

References

Source Reference
CONFIRM http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=374577
CONFIRM http://sourceforge.net/project/shownotes.php?release_id=468432
GENTOO GLSA-200607-07
MANDRIVA MDKSA-2006:117
MANDRIVA MDKSA-2006:121
SLACKWARE SSA:2006-357-05
UBUNTU USN-309-1
UBUNTU USN-315-1
BID 18608
VUPEN ADV-2006-2487
SECUNIA 20749
SECUNIA 20948
SECUNIA 20964
SECUNIA 21023
SECUNIA 21036
SECUNIA 21139
SECUNIA 23218
SECUNIA 23512