CVE-2008-7185 GNOME Rhythmbox 0.11.5 allows remote attackers to cause a denial of service (segmentation fault and crash) via a playlist (.pls) file with a long Title field, possibly related to the g_hash_table_look...
MediumCVSS 4.3
EPSS 3.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
GNOME Rhythmbox 0.11.5 allows remote attackers to cause a denial of service (segmentation fault and crash) via a playlist (.pls) file with a long Title field, possibly related to the g_hash_table_lookup function in b-playlist-manager.c.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNOME rhythmbox | = 0.11.5 | No fix listed |
| debian/rhythmbox(Debian:12) | All versions | No fix listed |
| debian/rhythmbox(Debian:12) | = 3.4.6-2 | No fix listed |
| debian/rhythmbox(Debian:12) | = 3.4.7-1 | No fix listed |
| debian/rhythmbox(Debian:12) | = 3.4.7-2 | No fix listed |
| debian/rhythmbox(Debian:12) | = 3.4.8-1 | No fix listed |
| debian/rhythmbox(Debian:12) | = 3.4.8-2 | No fix listed |
| debian/rhythmbox(Debian:12) | = 3.4.8-3 | No fix listed |
| debian/rhythmbox(Debian:12) | = 3.4.9-1 | No fix listed |
| debian/rhythmbox(Debian:12) | = 3.4.9-2 | No fix listed |
| debian/rhythmbox(Debian:12) | = 3.4.9-3 | No fix listed |
| debian/rhythmbox(Debian:12) | = 3.4.9-4 | No fix listed |
| debian/rhythmbox(Debian:12) | = 3.5.0-1 | No fix listed |
| debian/rhythmbox(Debian:12) | = 3.5.1-1 | No fix listed |
| debian/rhythmbox(Debian:13) | All versions | No fix listed |
| debian/rhythmbox(Debian:13) | = 3.4.8-1 | No fix listed |
| debian/rhythmbox(Debian:13) | = 3.4.8-2 | No fix listed |
| debian/rhythmbox(Debian:13) | = 3.4.8-3 | No fix listed |
| debian/rhythmbox(Debian:13) | = 3.4.9-1 | No fix listed |
| debian/rhythmbox(Debian:13) | = 3.4.9-2 | No fix listed |
| debian/rhythmbox(Debian:13) | = 3.4.9-3 | No fix listed |
| debian/rhythmbox(Debian:13) | = 3.4.9-4 | No fix listed |
| debian/rhythmbox(Debian:13) | = 3.5.0-1 | No fix listed |
| debian/rhythmbox(Debian:13) | = 3.5.1-1 | No fix listed |
| debian/rhythmbox(Debian:14) | All versions | No fix listed |
Show 9 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/rhythmbox(Debian:14) | = 3.4.8-1 | No fix listed |
| debian/rhythmbox(Debian:14) | = 3.4.8-2 | No fix listed |
| debian/rhythmbox(Debian:14) | = 3.4.8-3 | No fix listed |
| debian/rhythmbox(Debian:14) | = 3.4.9-1 | No fix listed |
| debian/rhythmbox(Debian:14) | = 3.4.9-2 | No fix listed |
| debian/rhythmbox(Debian:14) | = 3.4.9-3 | No fix listed |
| debian/rhythmbox(Debian:14) | = 3.4.9-4 | No fix listed |
| debian/rhythmbox(Debian:14) | = 3.5.0-1 | No fix listed |
| debian/rhythmbox(Debian:14) | = 3.5.1-1 | No fix listed |
References
- Debian Security Tracker CVE-2008-7185 vendor-advisory
- packetstormsecurity.org exploit
- 20080626 Rhythmbox Vulnerability mailing-list
- 20080630 Re: Rhythmbox Vulnerability mailing-list
- 29958 exploit vdb-entry
- rhythmbox-playlist-dos(43436) vdb-entry