CVE-2006-2802
Fixed in a distro release EPSS 11%
Buffer overflow in the HTTP Plugin (xineplug_inp_http.so) for xine-lib 1.1.1 allows remote attackers to cause a denial of service (application crash) via a long reply from an HTTP server, as demonstrated using gxine 0.5.6.
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 3.0 | xine-lib | 0.9.8-2woody5 |
| Debian 3.1 | xine-lib | 1.0.1-1sarge3 |