CVEvulnerability

CVE-2006-1905

7.5 HIGH Published 2006-04-20 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-04-20
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Multiple format string vulnerabilities in xiTK (xitk/main.c) in xine 0.99.3 allow remote attackers to execute arbitrary code via format string specifiers in a long filename on an EXTINFO line in a playlist file.

Affected configurations

• xine xine 0.9.8 • xine xine 0.9.13 • xine xine 0.9.18 • xine xine 1.0 • xine xine 1.0.1 • xine xine 1 alpha • xine xine 1 beta1 • xine xine 1 beta2 • xine xine 1 beta3 • xine xine 1 beta4 • xine xine 1 beta5 • xine xine 1 beta6 • xine xine 1 beta7 • xine xine 1 beta8 • xine xine 1 beta9 • xine xine 1 beta10 • xine xine 1 beta11 • xine xine 1 beta12 • xine xine 1 rc0 • xine xine 1 rc0a • xine xine 1 rc1 • xine xine 1 rc2 • xine xine 1 rc3 • xine xine 1 rc3a • xine xine 1 rc3b • xine xine 1 rc4 • xine xine 1 rc5 • xine xine 1 rc6 • xine xine 1 rc6a • xine xine 1 rc7 • xine xine 1 rc8

References