CVE-2006-2802: xine gxine

EPSS trend

Probability

11.09%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

0.00 pp

From 11.09% on 21-09-2026

21-09-202621-10-2026

EPSS score

11.09%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

3 found

referenceUnverified
Exploit Reference (secunia.com)
Maturity: unknown
referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
exploit-databasedoslinuxVerified
gxine 0.5.6 - HTTP Plugin Remote Buffer Overflow (PoC)
Maturity: poc

References

15 links

www.debian.org/security/2006/dsa-1105Vendor AdvisoryX Refsource DEBIAN
www.osvdb.org/25936VDB EntryX Refsource OSVDB
secunia.com/advisories/20369Third Party AdvisoryX Refsource SECUNIAExploitVendor Advisory
secunia.com/advisories/20942Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/20766Third Party AdvisoryX Refsource SECUNIA
security.gentoo.org/glsa/glsa-200609-08.xmlVendor AdvisoryX Refsource GENTOO
www.securityfocus.com/bid/18187VDB EntryX Refsource BIDExploit
secunia.com/advisories/20549Third Party AdvisoryX Refsource SECUNIA
exchange.xforce.ibmcloud.com/vulnerabilities/26972VDB EntryX Refsource XF
lists.suse.com/archive/suse-security-announce/2006-Jun/0008.htmlVendor AdvisoryX Refsource SUSE

Show all 15 references

usn.ubuntu.com/295-1/Vendor AdvisoryX Refsource UBUNTU
secunia.com/advisories/20828Third Party AdvisoryX Refsource SECUNIA
www.exploit-db.com/exploits/1852ExploitX Refsource EXPLOIT DB
www.mandriva.com/security/advisories?name=MDKSA-2006:108Vendor AdvisoryX Refsource MANDRAKE
secunia.com/advisories/21919Third Party AdvisoryX Refsource SECUNIA

Related vulnerabilities

CVE-2005-1692xinegxine3.26%21y ago24-05-2005 04:00Format string vulnerability in gxine 0.4.1 through 0.4.4, and other versions down to 0.3, allows remote attackers to execute arbitrary code via a ram file with a URL whose hostname contains format string specifiers.CVE-2008-5246xinexine-lib5.69%17y ago26-11-2008 01:00Multiple heap-based buffer overflows in xine-lib before 1.1.15 allow remote attackers to execute arbitrary code via vectors that send ID3 data to the (1) id3v22_interp_frame and (2) id3v24_interp_frame functions in src/demuxers/id3.c. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.CVE-2008-5233xinexine-lib3.35%17y ago26-11-2008 01:00xine-lib 1.1.12, and other versions before 1.1.15, does not check for failure of malloc in circumstances including (1) the mymng_process_header function in demux_mng.c, (2) the open_mod_file function in demux_mod.c, and (3) frame_buffer allocation in the real_parse_audio_specific_data function in demux_real.c, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted media file.CVE-2008-5243xinexine-lib1.80%17y ago26-11-2008 01:00The real_parse_headers function in demux_real.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, relies on an untrusted input length value to "reindex into an allocated buffer," which allows remote attackers to cause a denial of service (crash) via a crafted value, probably an array index error.CVE-2008-5241xinexine-lib1.80%17y ago26-11-2008 01:00Integer underflow in demux_qt.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, allows remote attackers to cause a denial of service (crash) via a crafted media file that results in a small value of moov_atom_size in a compressed MOV (aka CMOV_ATOM).CVE-2008-5245xinexine-lib1.75%17y ago26-11-2008 01:00xine-lib before 1.1.15 performs V4L video frame preallocation before ascertaining the required length, which has unknown impact and attack vectors, possibly related to a buffer overflow in the open_video_capture_device function in src/input/input_v4l.c.

All vulnerabilities ingxine xine-lib

CVE-2006-2802: xine gxine

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References