CVE-2006-1905

Publication date 20 April 2006

Last updated 24 July 2024


Ubuntu priority

Multiple format string vulnerabilities in xiTK (xitk/main.c) in xine 0.99.3 allow remote attackers to execute arbitrary code via format string specifiers in a long filename on an EXTINFO line in a playlist file.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
xine-ui 7.04 feisty
Fixed 0.99.4-0ubuntu6
6.10 edgy
Fixed 0.99.4-0ubuntu6
6.06 LTS dapper
Fixed 0.99.4-0ubuntu6