CVE-2006-0051

Buffer overflow in playlistimport.cpp in Kaffeine Player 0.4.2 through 0.7.1 allows user-assisted attackers to execute arbitrary code via long HTTP request headers when Kaffeine is "fetching remote playlists", which triggers the overflow in the httppeek function...

CVE-2006-0051

CVE-2006-0051 affects kaffeine (KDE media player) versions 0.4.2 through 0.7.1. A buffer overflow in playlistimport.cpp/https flow when fetching remote playlists can be triggered by long HTTP request headers, overflowing http_peek and permitting arbitrary code execution by an attacker who tricks ...

CVE-2006-0051

Buffer overflow in playlistimport.cpp in Kaffeine Player 0.4.2 through 0.7.1 allows user-assisted attackers to execute arbitrary code via long HTTP request headers when Kaffeine is "fetching remote playlists", which triggers the overflow in the httppeek function...

CVE-2006-0051

Buffer overflow in playlistimport.cpp in Kaffeine Player 0.4.2 through 0.7.1 allows user-assisted attackers to execute arbitrary code via long HTTP request headers when Kaffeine is "fetching remote playlists", which triggers the overflow in the httppeek function...

[SECURITY] [DSA 1023-1] New kaffeine packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1023-1 [email protected] http://www.debian.org/security/ Martin Schulze April 5th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1023-1] New kaffeine packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1023-1 [email protected] http://www.debian.org/security/ Martin Schulze April 5th, 2006 http://www.debian.org/security/faq -...

Kaffeine: Buffer overflow

Background Kaffeine is a graphical front-end for the xine-lib multimedia library. Description Kaffeine uses an unchecked buffer when fetching remote RAM playlists via HTTP. Impact A remote attacker could entice a user to play a specially-crafted RAM playlist resulting in the execution of arbitrar...

DSA-1023-1 kaffeine - buffer overflow

Bulletin has no description...

Kaffeine buffer overflow

Buffer overflow on Content-Type: parsing...

[Full-disclosure] [SECURITY] [DSA 1023-1] New kaffeine packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1023-1 [email protected] http://www.debian.org/security/ Martin Schulze April 5th, 2006 http://www.debian.org/security/faq -...

kaffeine -- buffer overflow vulnerability

The KDE team reports: Kaffeine can produce a buffer overflow in httppeek while creating HTTP request headers for fetching remote playlists, which under certain circumstances could be used to crash the application and/or execute arbitrary code...

CVE-2004-1034

Buffer overflow in the httpopen function in Kaffeine before 0.5, whose code is also used in gxine before 0.3.3, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long Content-Type header for a Real Audio Media .ram playlist file...

CVE-2004-1034

Buffer overflow in the httpopen function in Kaffeine before 0.5, whose code is also used in gxine before 0.3.3, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long Content-Type header for a Real Audio Media .ram playlist file...

DEBIAN-CVE-2004-1034

Buffer overflow in the httpopen function in Kaffeine before 0.5, whose code is also used in gxine before 0.3.3, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long Content-Type header for a Real Audio Media .ram playlist file...

CVE-2004-1034

Buffer overflow in the httpopen function in Kaffeine before 0.5, whose code is also used in gxine before 0.3.3, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long Content-Type header for a Real Audio Media .ram playlist file...

CVE-2004-1034

Buffer overflow in the httpopen function in Kaffeine before 0.5, whose code is also used in gxine before 0.3.3, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long Content-Type header for a Real Audio Media .ram playlist file...

CVE-2004-1034

CVE-2004-1034 describes a buffer overflow in Kaffeine (before 0.5) whose code is also used in gxine (before 0.3.3) triggered by a long Content-Type header for a Real Audio .ram playlist. The overflow occurs in the http_open function and can cause a denial of service (application crash) and potent...

GLSA-200411-14 : Kaffeine, gxine: Remotely exploitable buffer overflow

The remote host is affected by the vulnerability described in GLSA-200411-14 Kaffeine, gxine: Remotely exploitable buffer overflow KF of Secure Network Operations has discovered an overflow that occurs during the Content-Type header processing of Kaffeine. The vulnerable code in Kaffeine is reuse...

Kaffeine, gxine: Remotely exploitable buffer overflow

Background Kaffeine and gxine are graphical front-ends for xine-lib multimedia library. Description KF of Secure Network Operations has discovered an overflow that occurs during the Content-Type header processing of Kaffeine. The vulnerable code in Kaffeine is reused from gxine, making gxine...

[Full-Disclosure] Kaffeine Media Player Conteny Type overflow

Kaffeine =0.4.2 http://kaffeine.sourceforge.net/download.html Tested on SuSE Linux 9.1 on source compiled from kaffeine-0.4.3b.tar.bz2 also Tested on various SuSE and Fedora RPMS On SuSE Linux 9.1 i586 - Kernel 2.6.5-7.108-default...