CVE-2006-2200 Stack-based buffer overflow in libmms, as used by (a) MiMMS 0.0.9 and (b) xine-lib 1.1.0 and earlier, allows remote attackers to cause a denial of service (application crash) and possibly execute arbi...
MediumCVSS 5.1
EPSS 4.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in libmms, as used by (a) MiMMS 0.0.9 and (b) xine-lib 1.1.0 and earlier, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via the (1) send_command, (2) string_utf16, (3) get_data, and (4) get_media_packet functions, and possibly other functions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libmms(Debian:12) | < 0.2-7 | 0.2-7 |
| debian/libmms(Debian:13) | < 0.2-7 | 0.2-7 |
| mimms | = 0.0.9 | No fix listed |
| xine-lib | = 1.1.0 | No fix listed |
References
- Debian Security Tracker CVE-2006-2200 vendor-advisory
- 23512 third-party-advisory vendor-advisory
- USN-315-1 vendor-advisory
- ADV-2006-2487 vdb-entry vendor-advisory
- 21036 third-party-advisory vendor-advisory
- MDKSA-2006:117 vendor-advisory
- SSA:2006-357-05 vendor-advisory
- USN-309-1 vendor-advisory
- sourceforge.net
- MDKSA-2006:121 vendor-advisory
- bugs.debian.org
- 18608 vdb-entry
- 20749 third-party-advisory vendor-advisory
- 21023 third-party-advisory vendor-advisory
- 23218 third-party-advisory vendor-advisory
- 21139 third-party-advisory vendor-advisory
- 20964 third-party-advisory vendor-advisory
- 20948 third-party-advisory vendor-advisory
- GLSA-200607-07 vendor-advisory
- bugs.debian.org issue-tracking