Xine Gxine vulnerabilities
3 vulnerabilities
Known vulnerabilities in Xine Gxine, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2005-1692xinegxine
EPSS score3.26%
Format string vulnerability in gxine 0.4.1 through 0.4.4, and other versions down to 0.3, allows remote attackers to execute arbitrary code via a ram file with a URL whose hostname contains format string specifiers.CVE-2004-1034debiankaffeine+2EPSS score5.69%
Buffer overflow in the http_open function in Kaffeine before 0.5, whose code is also used in gxine before 0.3.3, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long Content-Type header for a Real Audio Media (.ram) playlist file.CVE-2006-2802debianxine-lib+2EPSS score11.09%
Buffer overflow in the HTTP Plugin (xineplug_inp_http.so) for xine-lib 1.1.1 allows remote attackers to cause a denial of service (application crash) via a long reply from an HTTP server, as demonstrated using gxine 0.5.6.