CVE-2006-2802: Buffer Overflow
Buffer overflow in the HTTP Plugin (xinepluginphttp.so) for xine-lib 1.1.1 allows remote attackers to cause a denial of service (application crash) via a long reply from an HTTP server, as demonstrated using gxine 0.5.6.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-2802?
CVE-2006-2802 is classified as a high severity vulnerability due to its potential to cause a denial of service through a remote attack.
How do I fix CVE-2006-2802?
To remediate CVE-2006-2802, upgrade xine-lib to version 1.1.2 or later, as this version addresses the buffer overflow issue.
Which versions of xine are affected by CVE-2006-2802?
CVE-2006-2802 affects xine-lib versions 1.0.1, 1.0.2, and 1.1.0, as well as gxine version 0.5.6.
Can CVE-2006-2802 be exploited remotely?
Yes, CVE-2006-2802 can be exploited remotely by attackers by sending specially crafted HTTP responses.
What is the impact of CVE-2006-2802 on affected systems?
The impact of CVE-2006-2802 is that it can lead to an application crash, which results in a denial of service for users.