Description
Buffer overflow in the HTTP Plugin (xineplug_inp_http.so) for xine-lib 1.1.1 allows remote attackers to cause a denial of service (application crash) via a long reply from an HTTP server, as demonstrated using gxine 0.5.6.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.debian.org/security/2006/dsa-1105 ↗
- http://www.osvdb.org/25936 ↗
- http://secunia.com/advisories/20369 ↗
- http://secunia.com/advisories/20942 ↗
- http://secunia.com/advisories/20766 ↗
- http://security.gentoo.org/glsa/glsa-200609-08.xml ↗
- http://www.securityfocus.com/bid/18187 ↗
- http://secunia.com/advisories/20549 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26972 ↗
- http://lists.suse.com/archive/suse-security-announce/2006-Jun/0008.html ↗
- https://usn.ubuntu.com/295-1/ ↗
- http://secunia.com/advisories/20828 ↗
- https://www.exploit-db.com/exploits/1852 ↗
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:108 ↗
- http://secunia.com/advisories/21919 ↗