CVE-2006-2200: Buffer Overflow

Published Jun 27, 2006

Updated

Stack-based buffer overflow in libmms, as used by (a) MiMMS 0.0.9 and (b) xine-lib 1.1.0 and earlier, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via the (1) sendcommand, (2) stringutf16, (3) getdata, and (4) getmediapacket functions, and possibly other functions.

Affected Software

2 affected components

xine Xine-lib=1.1.0

MiMMS MiMMS=0.0.9

Event History

Jun 27, 2006

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2006-2200?

CVE-2006-2200 has a high severity due to the potential for remote code execution and denial of service.

How do I fix CVE-2006-2200?

To fix CVE-2006-2200, update to the latest versions of xine-lib (greater than 1.1.0) and MiMMS (greater than 0.0.9) that contain the security patches.

Which versions are affected by CVE-2006-2200?

CVE-2006-2200 affects xine-lib version 1.1.0 and MiMMS version 0.0.9.

What type of vulnerability is CVE-2006-2200?

CVE-2006-2200 is a stack-based buffer overflow vulnerability.

Can CVE-2006-2200 lead to data loss?

CVE-2006-2200 primarily allows for application crashes and potential remote code execution, which could result in data loss.