libxine -- format string vulnerability

Gentoo Linux Security Advisory reports:

Ulf Harnhammar discovered a format string bug in the routines
handling CDDB server response contents.
An attacker could submit malicious information about an audio
CD to a public CDDB server (or impersonate a public CDDB server).
When the victim plays this CD on a multimedia frontend relying
on xine-lib, it could end up executing arbitrary code.