|
|
Family: Gentoo Local Security Checks --> Category: infos
[GLSA-200510-08] xine-lib: Format string vulnerability Vulnerability Scan
Vulnerability Scan Summary
xine-lib: Format string vulnerability
Detailed Explanation for this Vulnerability Test
The remote host is affected by the vulnerability described in GLSA-200510-08
(xine-lib: Format string vulnerability)
Ulf Harnhammar discovered a format string bug in the routines
handling CDDB server response contents.
Impact
A possible hacker could submit malicious information about an audio CD
to a public CDDB server (or impersonate a public CDDB server). When the
victim plays this CD on a multimedia frontend relying on xine-lib, it
could end up executing arbitrary code.
Workaround
There is no known workaround at this time.
References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2967
Solution:
All xine-lib users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose media-libs/xine-lib
Threat Level: Medium
Click HERE for more information and discussions on this network vulnerability scan.
|
