CVE-2006-1905
NoneCVSS
—
EPSS
14.3%
Published
Apr 20, 2006
CISA due date
—
The record
Multiple format string vulnerabilities in xiTK (xitk/main.c) in xine 0.99.3 allow remote attackers to execute arbitrary code via format string specifiers in a long filename on an EXTINFO line in a playlist file.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | xine-ui | 0 | 0.99.4-1 |
| Debian:11 | xine-ui | 0 | 0.99.4-1 |
| Debian:12 | xine-ui | 0 | 0.99.4-1 |
| Debian:13 | xine-ui | 0 | 0.99.4-1 |