Kaffeine Player vulnerabilities

2 vulnerabilities

Known vulnerabilities in Kaffeine Player, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

10CVE-2004-1034debiankaffeine+2
EPSS score
5.69%
Buffer overflow in the http_open function in Kaffeine before 0.5, whose code is also used in gxine before 0.3.3, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long Content-Type header for a Real Audio Media (.ram) playlist file.5.1CVE-2006-0051debiankaffeine+2
EPSS score
3.57%
Buffer overflow in playlistimport.cpp in Kaffeine Player 0.4.2 through 0.7.1 allows user-assisted attackers to execute arbitrary code via long HTTP request headers when Kaffeine is "fetching remote playlists", which triggers the overflow in the http_peek function.