Kaffeine vulnerabilities
2 vulnerabilities
Known vulnerabilities in Kaffeine products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.
Products
1- Kaffeine Player2 vulnerabilities
CVE-2004-1034debiankaffeine+2
EPSS score5.69%
Buffer overflow in the http_open function in Kaffeine before 0.5, whose code is also used in gxine before 0.3.3, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long Content-Type header for a Real Audio Media (.ram) playlist file.CVE-2006-0051debiankaffeine+2EPSS score3.57%
Buffer overflow in playlistimport.cpp in Kaffeine Player 0.4.2 through 0.7.1 allows user-assisted attackers to execute arbitrary code via long HTTP request headers when Kaffeine is "fetching remote playlists", which triggers the overflow in the http_peek function.