Gentoo: GLSA-202311-19 Normal: TunePimp Security Vulnerability Alert

Gentoo Linux Security Advisory GLSA 200607-11 https://security.gentoo.org/ Severity: Normal Title: TunePimp: Buffer overflow Date: July 28, 2006 Bugs: #140184 ID: 200607-11

Synopsis ======= A vulnerability in TunePimp has been reported which could lead to the execution of arbitrary code.
Background ========= The TunePimp library (also referred to as libtunepimp) is a development library geared towards developers who wish to create MusicBrainz enabled tagging applications.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 media-libs/tunepimp <= 0.4.2 Vulnerable! ------------------------------------------------------------------- NOTE: Certain packages are still vulnerable. Users should migrate to another package if one is available or wait for the existing packages to be marked stable by their architecture maintainers.
========== Kevin Kofler has reported a vulnerability where three stack variables are allocated with 255, 255 and 100 bytes respectively, yet 25...