diff options
| author | nobutaka <nobutaka@FreeBSD.org> | 2005-10-10 00:14:41 +0800 |
|---|---|---|
| committer | nobutaka <nobutaka@FreeBSD.org> | 2005-10-10 00:14:41 +0800 |
| commit | 135aef23b27dbfec842e1894427d28fae722fd39 (patch) | |
| tree | 6bdd43079f2df60d2f5a6ecd700eb2f57e1b1fdf /security | |
| parent | 8880d13a14460889416894a7227e694e8dc33499 (diff) | |
| download | freebsd-ports-gnome-135aef23b27dbfec842e1894427d28fae722fd39.tar.gz freebsd-ports-gnome-135aef23b27dbfec842e1894427d28fae722fd39.tar.zst freebsd-ports-gnome-135aef23b27dbfec842e1894427d28fae722fd39.zip | |
Add an entry for libxine format string vulnerability.
Diffstat (limited to 'security')
| -rw-r--r-- | security/vuxml/vuln.xml | 31 |
1 files changed, 31 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 154e9dc67a24..251093352909 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -34,6 +34,37 @@ Note: Please add new entries to the beginning of this file. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="3bc5691e-38dd-11da-92f5-020039488e34"> + <topic>libxine -- format string vulnerability</topic> + <affects> + <package> + <name>libxine</name> + <range><lt>1.1.0_1</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>Gentoo Linux Security Advisory reports:</p> + <blockquote cite="http://www.gentoo.org/security/en/glsa/glsa-200510-08.xml"> + <p>Ulf Harnhammar discovered a format string bug in the routines + handling CDDB server response contents.</p> + <p>An attacker could submit malicious information about an audio + CD to a public CDDB server (or impersonate a public CDDB server). + When the victim plays this CD on a multimedia frontend relying + on xine-lib, it could end up executing arbitrary code.</p> + </blockquote> + </body> + </description> + <references> + <cvename>CAN-2005-2967</cvename> + <url>http://www.gentoo.org/security/en/glsa/glsa-200510-08.xml</url> + </references> + <dates> + <discovery>2005-10-08</discovery> + <entry>2005-10-09</entry> + </dates> + </vuln> + <vuln vid="1f6e2ade-35c2-11da-811d-0050bf27ba24"> <topic>imap-uw -- mailbox name handling remote buffer vulnerability</topic> <affects> |