CVE Vulnerabilities

CVE-2004-1034

Published: Mar 01, 2005 | Modified: Jul 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
10 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

Buffer overflow in the http_open function in Kaffeine before 0.5, whose code is also used in gxine before 0.3.3, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long Content-Type header for a Real Audio Media (.ram) playlist file.

Affected Software

Name Vendor Start Version End Version
Gxine Xine 0.3 0.3
Kaffeine_player Kaffeine 0.5_rc1 0.5_rc1
Kaffeine_player Kaffeine 0.4.3 0.4.3
Kaffeine_player Kaffeine 0.4.3b 0.4.3b
Kaffeine_player Kaffeine 0.4.2 0.4.2

References