CVE-2005-2967: High severity xine Xine-lib vulnerability
Format string vulnerability in inputcdda.c in xine-lib 1-beta through 1-beta 3, 1-rc, 1.0 through 1.0.2, and 1.1.1 allows remote servers to execute arbitrary code via format string specifiers in metadata in CDDB server responses when the victim plays a CD.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-2967?
CVE-2005-2967 has a high severity level due to the potential for remote code execution.
How do I fix CVE-2005-2967?
To fix CVE-2005-2967, update the xine-lib to a patched version that is not affected by the format string vulnerability.
Which versions of xine-lib are affected by CVE-2005-2967?
CVE-2005-2967 affects xine-lib versions 0.9.13 through 1.1.1, including specific versions like 1.0.1 and 1.0.2.
What type of vulnerability is CVE-2005-2967?
CVE-2005-2967 is classified as a format string vulnerability that allows for arbitrary code execution.
What can attackers do with CVE-2005-2967?
Attackers can exploit CVE-2005-2967 to execute arbitrary code on a victim's machine by crafting malicious metadata in CDDB server responses.