CVE-2007-0255 XINE 0.99.4 allows user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a certain M3U file that contains a long #EXTINF line and cont...
HighCVSS 9.3
EPSS 4.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
XINE 0.99.4 allows user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a certain M3U file that contains a long #EXTINF line and contains format string specifiers in an invalid udp:// URI, possibly a variant of CVE-2007-0017.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xine | = 0.99.4 | No fix listed |
| ubuntu/xine-ui(Ubuntu:24.04) | All versions | No fix listed |
| ubuntu/xine-ui(Ubuntu:26.04) | All versions | No fix listed |
| ubuntu/xine-ui(Ubuntu:26.10) | All versions | No fix listed |
| ubuntu/xine-ui(Ubuntu:22.04) | All versions | No fix listed |
References
- 31666 vdb-entry
- 23931 third-party-advisory
- MDKSA-2007:027 vendor-advisory
- MDKSA-2007:154 vendor-advisory
- 20070110 VLC Format String Vulnerability also in XINE mailing-list
- 22252 vdb-entry
- Ubuntu CVE tracker vendor-advisory
- www.cve.org