CVE-2006-0051

2006-04-0510:04:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2006-0051

buffer overflow

kaffeine player

remote playlists

http request headers

7.5 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.038 Low

EPSS

Percentile

91.9%

JSON

Buffer overflow in playlistimport.cpp in Kaffeine Player 0.4.2 through 0.7.1 allows user-assisted attackers to execute arbitrary code via long HTTP request headers when Kaffeine is “fetching remote playlists”, which triggers the overflow in the http_peek function.

CPENameOperatorVersion
kaffeine:kaffeine_playerkaffeine kaffeine playereq0.7.1
kaffeine:kaffeine_playerkaffeine kaffeine playereq0.5_rc1
kaffeine:kaffeine_playerkaffeine kaffeine playereq0.4.3
kaffeine:kaffeine_playerkaffeine kaffeine playereq0.4.3b
kaffeine:kaffeine_playerkaffeine kaffeine playereq0.4.2

CPE	Name	Operator	Version
kaffeine:kaffeine_player	kaffeine kaffeine player	eq	0.7.1
kaffeine:kaffeine_player	kaffeine kaffeine player	eq	0.5_rc1
kaffeine:kaffeine_player	kaffeine kaffeine player	eq	0.4.3
kaffeine:kaffeine_player	kaffeine kaffeine player	eq	0.4.3b
kaffeine:kaffeine_player	kaffeine kaffeine player	eq	0.4.2