CVE-2005-2967
- State
- Published
- Severity
- Not scored
- Published
- Oct 14, 2005
- Updated
- Aug 7, 2024
- Reserved
- Sep 19, 2005
Description
Format string vulnerability in input_cdda.c in xine-lib 1-beta through 1-beta 3, 1-rc, 1.0 through 1.0.2, and 1.1.1 allows remote servers to execute arbitrary code via format string specifiers in metadata in CDDB server responses when the victim plays a CD.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 15044vdb-entry
- 17132third-party-advisory
- MDKSA-2005:180vendor-advisory
- 17282third-party-advisory
- 17097third-party-advisory
- 19892vdb-entry
- SSA:2005-283-01vendor-advisory
- http://xinehq.de/index.php/security/XSA-2005-1
- DSA-863vendor-advisory
- 20051008 xine/gxine CD Player Remote Format String Bugmailing-list
- SUSE-SR:2005:024vendor-advisory
- 17111third-party-advisory
- GLSA-200510-08vendor-advisory
- USN-196-1vendor-advisory
- 17179third-party-advisory
- 17162third-party-advisory
- 17099third-party-advisory
- xinelib-inputcdda-format-string(22545)vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.