← back
CVE-2006-1905

CVE-2006-1905

EPSS 14.3%
Multiple format string vulnerabilities in xiTK (xitk/main.c) in xine 0.99.3 allow remote attackers to execute arbitrary code via format string specifiers in a long filename on an EXTINFO line in a playlist file.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/27670unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://open-security.org/advisories/16http://secunia.com/advisories/19671http://secunia.com/advisories/19854http://secunia.com/advisories/20066http://securitytracker.com/id?1015959https://exchange.xforce.ibmcloud.com/vulnerabilities/25851http://sourceforge.net/mailarchive/message.php?msg_id=15429845http://www.gentoo.org/security/en/glsa/glsa-200604-15.xmlhttp://www.mandriva.com/security/advisories?name=MDKSA-2006:085http://www.novell.com/linux/security/advisories/2006_05_05.htmlhttp://www.osvdb.org/24747http://www.securityfocus.com/archive/1/431251/100/0/threaded