CVE-2006-1664: xine xine-lib

EPSS trend

Probability

14.97%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

+0.33 pp

From 14.64% on 21-09-2026

21-09-202621-10-2026

EPSS score

14.97%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
exploit-databasedoslinuxVerified
Libxine 1.14 - MPEG Stream Buffer Overflow (PoC)
Maturity: poc

References

13 links

secunia.com/advisories/19856Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/28666Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/data/vulnerabilities/exploits/xinelib_poc.plX Refsource MISCExploit
exchange.xforce.ibmcloud.com/vulnerabilities/25670VDB EntryX Refsource XF
www.redhat.com/archives/fedora-package-announce/2008-January/msg00976.htmlVendor AdvisoryX Refsource FEDORA
www.redhat.com/archives/fedora-package-announce/2008-January/msg00956.htmlVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/19853Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/bid/17370VDB EntryX Refsource BID
bugs.gentoo.org/show_bug.cgi?id=128838X Refsource CONFIRM
securitytracker.com/id?1015868VDB EntryX Refsource SECTRACK

Show all 13 references

sourceforge.net/project/shownotes.php?group_id=9655&release_id=571608X Refsource MISC
www.exploit-db.com/exploits/1641ExploitX Refsource EXPLOIT DB
www.gentoo.org/security/en/glsa/glsa-200604-16.xmlVendor AdvisoryX Refsource GENTOO

Related vulnerabilities

CVE-2008-5246xinexine-lib5.69%17y ago26-11-2008 01:00Multiple heap-based buffer overflows in xine-lib before 1.1.15 allow remote attackers to execute arbitrary code via vectors that send ID3 data to the (1) id3v22_interp_frame and (2) id3v24_interp_frame functions in src/demuxers/id3.c. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.CVE-2008-5233xinexine-lib3.35%17y ago26-11-2008 01:00xine-lib 1.1.12, and other versions before 1.1.15, does not check for failure of malloc in circumstances including (1) the mymng_process_header function in demux_mng.c, (2) the open_mod_file function in demux_mod.c, and (3) frame_buffer allocation in the real_parse_audio_specific_data function in demux_real.c, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted media file.CVE-2008-5243xinexine-lib1.80%17y ago26-11-2008 01:00The real_parse_headers function in demux_real.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, relies on an untrusted input length value to "reindex into an allocated buffer," which allows remote attackers to cause a denial of service (crash) via a crafted value, probably an array index error.CVE-2008-5241xinexine-lib1.80%17y ago26-11-2008 01:00Integer underflow in demux_qt.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, allows remote attackers to cause a denial of service (crash) via a crafted media file that results in a small value of moov_atom_size in a compressed MOV (aka CMOV_ATOM).CVE-2008-5245xinexine-lib1.75%17y ago26-11-2008 01:00xine-lib before 1.1.15 performs V4L video frame preallocation before ascertaining the required length, which has unknown impact and attack vectors, possibly related to a buffer overflow in the open_video_capture_device function in src/input/input_v4l.c.CVE-2008-5240xinexine-lib4.19%17y ago26-11-2008 01:00xine-lib 1.1.12, and other 1.1.15 and earlier versions, relies on an untrusted input value to determine the memory allocation and does not check the result for (1) the MATROSKA_ID_TR_CODECPRIVATE track entry element processed by demux_matroska.c; and (2) PROP_TAG, (3) MDPR_TAG, and (4) CONT_TAG chunks processed by the real_parse_headers function in demux_real.c; which allows remote attackers to cause a denial of service (NULL pointer dereference and crash) or possibly execute arbitrary code via a crafted value.

All vulnerabilities inxine-lib

CVE-2006-1664: xine xine-lib

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References