CVE-2006-2230

Publication date 5 May 2006

Last updated 24 July 2024


Ubuntu priority

Multiple format string vulnerabilities in xiTK (xitk/main.c) in xine 0.99.4 might allow attackers to cause a denial of service via format string specifiers in an MP3 filename specified on the command line. NOTE: this is a different vulnerability than CVE-2006-1905. In addition, if the only attack vectors involve a user-assisted, local command line argument of a non-setuid program, this issue might not be a vulnerability.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
xine-ui 9.10 karmic
Fixed 0.99.4-2
9.04 jaunty
Fixed 0.99.4-2
8.10 intrepid
Fixed 0.99.4-2
8.04 LTS hardy
Fixed 0.99.4-2
7.10 gutsy
Fixed 0.99.4-2
7.04 feisty
Fixed 0.99.4-2
6.10 edgy Ignored end of life, was needed
6.06 LTS dapper Ignored end of life