Lucene search
Ubuntu.comUB:CVE-2007-0255HistoryJan 16, 2007 - 12:00 a.m.
CVE-2007-0255
2007-01-1600:00:00
ubuntu.com
ubuntu.com
9
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.078 Low
EPSS
Percentile
94.1%
XINE 0.99.4 allows user-assisted remote attackers to cause a denial of
service (application crash) and possibly execute arbitrary code via a
certain M3U file that contains a long #EXTINF line and contains format
string specifiers in an invalid udp:// URI, possibly a variant of
CVE-2007-0017.
Notes
| Author | Note |
|---|---|
| sbeattie | issue is unlisted on xine upstream website |
Related
cve
cve
CVE-2007-0255
2007-01-16 23:28:00
CVE-2007-0017
2007-01-03 02:28:00
prion
prion
Format string
2007-01-16 23:28:00
Format string
2007-01-03 02:28:00
securityvulns
securityvulns
VLC Media Player buffer overflow
2007-01-21 00:00:00
nessus
nessus
Mandrake Linux Security Advisory : xine-ui (MDKSA-2007:154)
2009-04-23 00:00:00
Mandrake Linux Security Advisory : xine-ui (MDKSA-2007:027)
2007-02-18 00:00:00
SuSE 10 Security Update : xine (ZYPP Patch Number 2505)
2007-12-13 00:00:00
openvas
openvas
Mandriva Update for xine-ui MDKSA-2007:027 (xine-ui)
2009-04-09 00:00:00
Mandriva Update for xine-ui MDKSA-2007:027 (xine-ui)
2009-04-09 00:00:00
Debian Security Advisory DSA 1252-1 (vlc)
2008-01-17 00:00:00
osv
osv
vlc
2007-01-27 00:00:00
suse
suse
remote code execution in xine-ui,xine-lib,xine-extra,xine-devel
2007-01-23 12:13:50
checkpoint_advisories
checkpoint_advisories
VLC udp Handler Format String Code Execution - Ver2 (CVE-2007-0017)
2014-12-28 00:00:00
debian
debian
[SECURITY] [DSA 1252-1] New vlc packages fix arbitrary code execution
2007-01-27 14:37:46
packetstorm
packetstorm
VLCMediaSlayer-x86.pl.txt
2007-01-04 00:00:00
VLCMediaSlayer-ppc.pl.txt
2007-01-04 00:00:00
ubuntucve
ubuntucve
CVE-2007-0017
2007-01-03 00:00:00
gentoo
gentoo
VLC media player: Format string vulnerability
2007-01-26 00:00:00
debiancve
debiancve
CVE-2007-0017
2007-01-03 02:28:00
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.078 Low
EPSS
Percentile
94.1%
Related for UB:CVE-2007-0255