Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 591
Alerts This Week
Warning Icon 1 591

Gentoo: 200701-18 Update on xine-ui Format String Vulnerability

gentoo
Calendar Grey January 23, 2007
Dist Gentoo Esm H88
Explore the Gentoo GLSA 200701-18 which discusses vulnerabilities in xine-ui related to format string flaws, emphasizing the potential dangers of arbitrary code execution.
xine-ui improperly handles format strings, possibly allowing for the execution of arbitrary code.

Summary

Gentoo Linux Security Advisory GLSA 200701-18 https://security.gentoo.org/ Severity: Normal Title: xine-ui: Format string vulnerabilities Date: January 23, 2007 Bugs: #161558 ID: 200701-18

Synopsis ======= xine-ui improperly handles format strings, possibly allowing for the execution of arbitrary code.
Background ========= xine-ui is a skin-based user interface for xine. xine is a free multimedia player. It plays CDs, DVDs, and VCDs, and can also decode other common multimedia formats.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 xine-ui < 0.99.5_pre20060716 >= 0.99.5_pre20060716
========== Due to the improper handling and use of format strings, the errors_create_win...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory gentoo format string arbitrary code execution media player xine-ui normal severity

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory gentoo format string arbitrary code execution media player xine-ui normal severity

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround