Patchwire CVEs, their patch status, and feeds to follow them

CVE-2004-1034

Fixed in a distro release EPSS 6%

Buffer overflow in the http_open function in Kaffeine before 0.5, whose code is also used in gxine before 0.3.3, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long Content-Type header for a Real Audio Media (.ram) playlist file.

Published 2004-11-16 · CVE record · OSV

Products: kaffeine_player, gxine, gentoo linux

Distro releases

ReleasePackageFixed in
Debian 12kaffeine0.4.3.1-3
Debian 13kaffeine0.4.3.1-3
Debian 14kaffeine0.4.3.1-3