CVE-2005-3424

Publication date 1 November 2005

Last updated 17 July 2025

Ubuntu priority

Description

Cross-site scripting (XSS) vulnerability in GNUMP3D before 2.9.5 allows remote attackers to inject arbitrary web script or HTML via 404 error pages, a different vulnerability than CVE-2005-3425.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
gnump3d	7.10 gutsy	Fixed 2.9.8-2
	7.04 feisty	Fixed 2.9.8-2
	6.10 edgy	Fixed 2.9.8-2
	6.06 LTS dapper	Fixed 2.9.8-2

How can I get the fixes?
What do statuses mean?

References

MITRE
NVD
Launchpad
Debian

Other references

https://www.cve.org/CVERecord?id=CVE-2005-3424