CVE-2006-1905: xine
Vulnerability summary
CVE-2006-1905 is a high (CVSS 7.5) vulnerability in xine. EPSS estimates a 14.58% chance of exploitation in the next 30 days, higher than 96.6% of scored vulnerabilities. 2 public exploits are recorded.
Timeline
- 20-04-2006PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Multiple format string vulnerabilities in xiTK (xitk/main.c) in xine 0.99.3 allow remote attackers to execute arbitrary code via format string specifiers in a long filename on an EXTINFO line in a playlist file.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
14.58%
Chance of exploitation in the next 30 days
Percentile
97%
Versus all other CVEs
30-day change
+0.32 pp
From 14.26% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundExploit Reference (securityfocus.com)
Maturity: unknown
Xine 0.9/1.0 - Playlist Handling Remote Format String
Maturity: poc
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Debian1 product
- xine-ui< 0.99.4-1
Xine1 product
- xine0.9.8 | 0.9.13 | 0.9.18 | 1.0 | 1.0.1 | 1_alpha | 1_beta1 | 1_beta2 | 1_beta3 | 1_beta4 | 1_beta5 | 1_beta6 | 1_beta7 | 1_beta8 | 1_beta9 | 1_beta10 | 1_beta11 | 1_beta12 | 1_rc0 | 1_rc0a | 1_rc1 | 1_rc2 | 1_rc3 | 1_rc3a | 1_rc3b | 1_rc4 | 1_rc5 | 1_rc6 | 1_rc6a | 1_rc7 | 1_rc8
2 vendors · 2 products
References
15 links- open-security.org/advisories/16X Refsource MISC
Show all 15 references
- sourceforge.net/mailarchive/message.php?msg_id=15429845X Refsource CONFIRM
