CVE-2006-0051: Buffer Overflow
Buffer overflow in playlistimport.cpp in Kaffeine Player 0.4.2 through 0.7.1 allows user-assisted attackers to execute arbitrary code via long HTTP request headers when Kaffeine is "fetching remote playlists", which triggers the overflow in the httppeek function.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-0051?
CVE-2006-0051 is considered a high severity vulnerability due to the potential for arbitrary code execution.
How do I fix CVE-2006-0051?
To mitigate CVE-2006-0051, update Kaffeine Player to version 0.7.2 or later, as this version addresses the buffer overflow.
What software is affected by CVE-2006-0051?
CVE-2006-0051 affects Kaffeine Player versions 0.4.2 through 0.7.1.
What kind of attack does CVE-2006-0051 facilitate?
CVE-2006-0051 allows user-assisted attackers to execute arbitrary code through long HTTP request headers during remote playlist fetching.
In which function does the overflow occur in CVE-2006-0051?
The buffer overflow in CVE-2006-0051 occurs in the http_peek function within playlistimport.cpp.