CVE-2006-2230
Publication date 5 May 2006
Last updated 24 July 2024
Ubuntu priority
Multiple format string vulnerabilities in xiTK (xitk/main.c) in xine 0.99.4 might allow attackers to cause a denial of service via format string specifiers in an MP3 filename specified on the command line. NOTE: this is a different vulnerability than CVE-2006-1905. In addition, if the only attack vectors involve a user-assisted, local command line argument of a non-setuid program, this issue might not be a vulnerability.
Status
Package | Ubuntu Release | Status |
---|---|---|
xine-ui | 9.10 karmic |
Fixed 0.99.4-2
|
9.04 jaunty |
Fixed 0.99.4-2
|
|
8.10 intrepid |
Fixed 0.99.4-2
|
|
8.04 LTS hardy |
Fixed 0.99.4-2
|
|
7.10 gutsy |
Fixed 0.99.4-2
|
|
7.04 feisty |
Fixed 0.99.4-2
|
|
6.10 edgy | Ignored end of life, was needed | |
6.06 LTS dapper | Ignored end of life |