|
|
Family: Ubuntu Local Security Checks --> Category: infos
USN196-1 : xine-lib vulnerability Vulnerability Scan
Vulnerability Scan Summary
xine-lib vulnerability
Detailed Explanation for this Vulnerability Test
Synopsis :
These remote packages are missing security patches :
- libxine-dev
- libxine1
Description :
Ulf Harnhammar discovered a format string vulnerability in the CDDB
module's cache file handling in the Xine library, which is
used by packages such as xine-ui, totem-xine, and gxine.
By tricking an user into playing a particular audio CD which has a
specially-crafted CDDB entry, a remote attacker could exploit this
vulnerability to execute arbitrary code with the rights of the
user running the application. Since CDDB servers usually allow anybody
to add and modify information, this exploit does not even require a
particular CDDB server to be selected.
Solution :
Upgrade to :
- libxine-dev-1.0-1ubuntu3.1.1 (Ubuntu 5.04)
- libxine1-1.0-1ubuntu3.1.1 (Ubuntu 5.04)
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.
|
