Format string vulnerability in gxine 0.4.1 through 0.4.4, and other versions down to 0.3, allows remote attackers to execute arbitrary code via a ram file with a URL whose hostname contains format string specifiers.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Gxine | Xine | 0.41 (including) | 0.41 (including) |
| Gxine | Xine | 0.42 (including) | 0.42 (including) |
| Gxine | Xine | 0.43 (including) | 0.43 (including) |
| Gxine | Xine | 0.44 (including) | 0.44 (including) |