CVE-2014-3800

CVE-2014-3800 affects XBMC 13.0, where .xbmc/userdata/sources.xml is stored with world-readable permissions. This allows a local attacker to read user names and passwords from that file. Several connected documents corroborate the impact and show that mitigation involves updating the affected Kod...