Description
Format string vulnerability in gxine 0.4.1 through 0.4.4, and other versions down to 0.3, allows remote attackers to execute arbitrary code via a ram file with a URL whose hostname contains format string specifiers.
References
- 13707 vdb-entry
- http://www.0xbadexworm.org/adv/gxinefmt.txt
- 16747 vdb-entry
- ADV-2005-0626 vdb-entry
- GLSA-200505-19 vendor-advisory
- http://cvs.sourceforge.net/viewcvs.py/xine/gnome-xine/ChangeLog?rev=HEAD&content-type=text/vnd.viewcvs-markup
- 15451 third-party-advisory
- 20050521 pst.advisory 2005-21: gxine remote exploitable . opensource is god .lol windows mailing-list