Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Gentoo: 200510-08 Normal: xine-lib Format String Threat

gentoo
Calendar Grey October 8, 2005
Scroller Gentoo
A vulnerability in xine-lib on Gentoo relates to format strings, enabling attackers to execute arbitrary code via malicious CDDB responses. Act swiftly!
xine-lib contains a format string error in CDDB response handling that may be exploited to execute arbitrary code.

Summary

Gentoo Linux Security Advisory GLSA 200510-08 https://security.gentoo.org/ Severity: Normal Title: xine-lib: Format string vulnerability Date: October 08, 2005 Bugs: #107854 ID: 200510-08

Synopsis ======= xine-lib contains a format string error in CDDB response handling that may be exploited to execute arbitrary code.
Background ========= xine-lib is a multimedia library which can be utilized to create multimedia frontends. It includes functions to retrieve information about audio CD contents from public CDDB servers.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ----------...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory gentoo code execution format string xine-lib malicious input multimedia library

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory gentoo code execution format string xine-lib malicious input multimedia library

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround