CVE-2006-2802

None

CVSS

—

EPSS

11.1%

Published

Jun 3, 2006

CISA due date

—

The record

Buffer overflow in the HTTP Plugin (xineplug_inp_http.so) for xine-lib 1.1.1 allows remote attackers to cause a denial of service (application crash) via a long reply from an HTTP server, as demonstrated using gxine 0.5.6.

Affected packages

Ecosystem	Package	Introduced	Fixed
Debian:3.0	xine-lib	0	0.9.8-2woody5
Debian:3.1	xine-lib	0	1.0.1-1sarge3

Related vulnerabilities

CVE-2008-0225 Heap-based buffer overflow in the rmff_dump_cont function in input/libreal/rmff.c in… Also affects xine-lib