Vulnerabilites related to kaffeine - kaffeine_player
CVE-2004-1034 (GCVE-0-2004-1034)
Vulnerability from cvelistv5
Published
2004-11-16 05:00
Modified
2024-08-08 00:39
Severity ?
CWE
  • n/a
Summary
Buffer overflow in the http_open function in Kaffeine before 0.5, whose code is also used in gxine before 0.3.3, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long Content-Type header for a Real Audio Media (.ram) playlist file.
References
Impacted products
Vendor Product Version
n/a n/a Version: n/a
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-08T00:39:00.753Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "11528",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/11528"
          },
          {
            "name": "GLSA-200411-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200411-14.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://sourceforge.net/tracker/index.php?func=detail\u0026aid=1060299\u0026group_id=9655\u0026atid=109655"
          },
          {
            "name": "13117",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/13117/"
          },
          {
            "name": "kaffeine-ram-bo(17849)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17849"
          },
          {
            "name": "20041025 Kaffeine Media Player Conteny Type overflow",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028061.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2004-10-25T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in the http_open function in Kaffeine before 0.5, whose code is also used in gxine before 0.3.3, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long Content-Type header for a Real Audio Media (.ram) playlist file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-07-10T14:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "11528",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/11528"
        },
        {
          "name": "GLSA-200411-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200411-14.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://sourceforge.net/tracker/index.php?func=detail\u0026aid=1060299\u0026group_id=9655\u0026atid=109655"
        },
        {
          "name": "13117",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/13117/"
        },
        {
          "name": "kaffeine-ram-bo(17849)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17849"
        },
        {
          "name": "20041025 Kaffeine Media Player Conteny Type overflow",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028061.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2004-1034",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Buffer overflow in the http_open function in Kaffeine before 0.5, whose code is also used in gxine before 0.3.3, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long Content-Type header for a Real Audio Media (.ram) playlist file."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "11528",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/11528"
            },
            {
              "name": "GLSA-200411-14",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200411-14.xml"
            },
            {
              "name": "http://sourceforge.net/tracker/index.php?func=detail\u0026aid=1060299\u0026group_id=9655\u0026atid=109655",
              "refsource": "CONFIRM",
              "url": "http://sourceforge.net/tracker/index.php?func=detail\u0026aid=1060299\u0026group_id=9655\u0026atid=109655"
            },
            {
              "name": "13117",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/13117/"
            },
            {
              "name": "kaffeine-ram-bo(17849)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17849"
            },
            {
              "name": "20041025 Kaffeine Media Player Conteny Type overflow",
              "refsource": "FULLDISC",
              "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028061.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2004-1034",
    "datePublished": "2004-11-16T05:00:00",
    "dateReserved": "2004-11-12T00:00:00",
    "dateUpdated": "2024-08-08T00:39:00.753Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2006-0051 (GCVE-0-2006-0051)
Vulnerability from cvelistv5
Published
2006-04-05 10:00
Modified
2024-08-07 16:18
Severity ?
CWE
  • n/a
Summary
Buffer overflow in playlistimport.cpp in Kaffeine Player 0.4.2 through 0.7.1 allows user-assisted attackers to execute arbitrary code via long HTTP request headers when Kaffeine is "fetching remote playlists", which triggers the overflow in the http_peek function.
References
https://usn.ubuntu.com/268-1/ vendor-advisory, x_refsource_UBUNTU
http://www.vupen.com/english/advisories/2006/1229 vdb-entry, x_refsource_VUPEN
http://www.kde.org/info/security/advisory-20060404-1.txt x_refsource_CONFIRM
http://secunia.com/advisories/19557 third-party-advisory, x_refsource_SECUNIA
http://www.securityfocus.com/bid/17372 vdb-entry, x_refsource_BID
http://www.mandriva.com/security/advisories?name=MDKSA-2006:065 vendor-advisory, x_refsource_MANDRIVA
http://www.debian.org/security/2006/dsa-1023 vendor-advisory, x_refsource_DEBIAN
http://securitytracker.com/id?1015863 vdb-entry, x_refsource_SECTRACK
https://exchange.xforce.ibmcloud.com/vulnerabilities/25631 vdb-entry, x_refsource_XF
http://www.gentoo.org/security/en/glsa/glsa-200604-04.xml vendor-advisory, x_refsource_GENTOO
http://www.novell.com/linux/security/advisories/2006_08_sr.html vendor-advisory, x_refsource_SUSE
http://secunia.com/advisories/19549 third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/19542 third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/19525 third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/19540 third-party-advisory, x_refsource_SECUNIA
http://www.securityfocus.com/archive/1/430319/100/0/threaded mailing-list, x_refsource_BUGTRAQ
http://secunia.com/advisories/19571 third-party-advisory, x_refsource_SECUNIA
Impacted products
Vendor Product Version
n/a n/a Version: n/a
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T16:18:20.701Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-268-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/268-1/"
          },
          {
            "name": "ADV-2006-1229",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/1229"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kde.org/info/security/advisory-20060404-1.txt"
          },
          {
            "name": "19557",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19557"
          },
          {
            "name": "17372",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/17372"
          },
          {
            "name": "MDKSA-2006:065",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:065"
          },
          {
            "name": "DSA-1023",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1023"
          },
          {
            "name": "1015863",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1015863"
          },
          {
            "name": "kaffeine-http-peek-bo(25631)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25631"
          },
          {
            "name": "GLSA-200604-04",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200604-04.xml"
          },
          {
            "name": "SUSE-SR:2006:008",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2006_08_sr.html"
          },
          {
            "name": "19549",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19549"
          },
          {
            "name": "19542",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19542"
          },
          {
            "name": "19525",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19525"
          },
          {
            "name": "19540",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19540"
          },
          {
            "name": "20060405 [Kaffeine Security Advisory] Heap based buffer overflow in http_peek()",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/430319/100/0/threaded"
          },
          {
            "name": "19571",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19571"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-04-04T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in playlistimport.cpp in Kaffeine Player 0.4.2 through 0.7.1 allows user-assisted attackers to execute arbitrary code via long HTTP request headers when Kaffeine is \"fetching remote playlists\", which triggers the overflow in the http_peek function."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-19T14:57:01",
        "orgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5",
        "shortName": "debian"
      },
      "references": [
        {
          "name": "USN-268-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/268-1/"
        },
        {
          "name": "ADV-2006-1229",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/1229"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kde.org/info/security/advisory-20060404-1.txt"
        },
        {
          "name": "19557",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19557"
        },
        {
          "name": "17372",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/17372"
        },
        {
          "name": "MDKSA-2006:065",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:065"
        },
        {
          "name": "DSA-1023",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1023"
        },
        {
          "name": "1015863",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1015863"
        },
        {
          "name": "kaffeine-http-peek-bo(25631)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25631"
        },
        {
          "name": "GLSA-200604-04",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200604-04.xml"
        },
        {
          "name": "SUSE-SR:2006:008",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2006_08_sr.html"
        },
        {
          "name": "19549",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19549"
        },
        {
          "name": "19542",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19542"
        },
        {
          "name": "19525",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19525"
        },
        {
          "name": "19540",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19540"
        },
        {
          "name": "20060405 [Kaffeine Security Advisory] Heap based buffer overflow in http_peek()",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/430319/100/0/threaded"
        },
        {
          "name": "19571",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19571"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@debian.org",
          "ID": "CVE-2006-0051",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Buffer overflow in playlistimport.cpp in Kaffeine Player 0.4.2 through 0.7.1 allows user-assisted attackers to execute arbitrary code via long HTTP request headers when Kaffeine is \"fetching remote playlists\", which triggers the overflow in the http_peek function."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "USN-268-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/268-1/"
            },
            {
              "name": "ADV-2006-1229",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/1229"
            },
            {
              "name": "http://www.kde.org/info/security/advisory-20060404-1.txt",
              "refsource": "CONFIRM",
              "url": "http://www.kde.org/info/security/advisory-20060404-1.txt"
            },
            {
              "name": "19557",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19557"
            },
            {
              "name": "17372",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/17372"
            },
            {
              "name": "MDKSA-2006:065",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:065"
            },
            {
              "name": "DSA-1023",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1023"
            },
            {
              "name": "1015863",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1015863"
            },
            {
              "name": "kaffeine-http-peek-bo(25631)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25631"
            },
            {
              "name": "GLSA-200604-04",
              "refsource": "GENTOO",
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200604-04.xml"
            },
            {
              "name": "SUSE-SR:2006:008",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2006_08_sr.html"
            },
            {
              "name": "19549",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19549"
            },
            {
              "name": "19542",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19542"
            },
            {
              "name": "19525",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19525"
            },
            {
              "name": "19540",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19540"
            },
            {
              "name": "20060405 [Kaffeine Security Advisory] Heap based buffer overflow in http_peek()",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/430319/100/0/threaded"
            },
            {
              "name": "19571",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19571"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5",
    "assignerShortName": "debian",
    "cveId": "CVE-2006-0051",
    "datePublished": "2006-04-05T10:00:00",
    "dateReserved": "2005-12-28T00:00:00",
    "dateUpdated": "2024-08-07T16:18:20.701Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Vulnerability from fkie_nvd
Published
2006-04-05 10:04
Modified
2025-04-03 01:03
Severity ?
Summary
Buffer overflow in playlistimport.cpp in Kaffeine Player 0.4.2 through 0.7.1 allows user-assisted attackers to execute arbitrary code via long HTTP request headers when Kaffeine is "fetching remote playlists", which triggers the overflow in the http_peek function.
References
security@debian.orghttp://secunia.com/advisories/19525Patch, Vendor Advisory
security@debian.orghttp://secunia.com/advisories/19540
security@debian.orghttp://secunia.com/advisories/19542
security@debian.orghttp://secunia.com/advisories/19549
security@debian.orghttp://secunia.com/advisories/19557
security@debian.orghttp://secunia.com/advisories/19571
security@debian.orghttp://securitytracker.com/id?1015863
security@debian.orghttp://www.debian.org/security/2006/dsa-1023
security@debian.orghttp://www.gentoo.org/security/en/glsa/glsa-200604-04.xml
security@debian.orghttp://www.kde.org/info/security/advisory-20060404-1.txtPatch, Vendor Advisory
security@debian.orghttp://www.mandriva.com/security/advisories?name=MDKSA-2006:065
security@debian.orghttp://www.novell.com/linux/security/advisories/2006_08_sr.html
security@debian.orghttp://www.securityfocus.com/archive/1/430319/100/0/threaded
security@debian.orghttp://www.securityfocus.com/bid/17372
security@debian.orghttp://www.vupen.com/english/advisories/2006/1229
security@debian.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/25631
security@debian.orghttps://usn.ubuntu.com/268-1/
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/19525Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/19540
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/19542
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/19549
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/19557
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/19571
af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1015863
af854a3a-2127-422b-91ae-364da2661108http://www.debian.org/security/2006/dsa-1023
af854a3a-2127-422b-91ae-364da2661108http://www.gentoo.org/security/en/glsa/glsa-200604-04.xml
af854a3a-2127-422b-91ae-364da2661108http://www.kde.org/info/security/advisory-20060404-1.txtPatch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.mandriva.com/security/advisories?name=MDKSA-2006:065
af854a3a-2127-422b-91ae-364da2661108http://www.novell.com/linux/security/advisories/2006_08_sr.html
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/archive/1/430319/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/17372
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2006/1229
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/25631
af854a3a-2127-422b-91ae-364da2661108https://usn.ubuntu.com/268-1/
Impacted products
Vendor Product Version
kaffeine kaffeine_player 0.4.2
kaffeine kaffeine_player 0.4.3
kaffeine kaffeine_player 0.4.3b
kaffeine kaffeine_player 0.5_rc1
kaffeine kaffeine_player 0.7.1


To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:kaffeine:kaffeine_player:0.4.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "789E99F5-9047-4B97-9F5D-0A83A5B2C264",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:kaffeine:kaffeine_player:0.4.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "C6AEDC59-1392-45A6-A498-07061345ED1D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:kaffeine:kaffeine_player:0.4.3b:*:*:*:*:*:*:*",
              "matchCriteriaId": "650E1BFF-C301-43FA-B6A0-FF14CFBC6E07",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:kaffeine:kaffeine_player:0.5_rc1:*:*:*:*:*:*:*",
              "matchCriteriaId": "E4D173DD-913A-4A32-B687-B4E2F7BBEB32",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:kaffeine:kaffeine_player:0.7.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "79CBD359-6818-444C-A0DD-212B21832640",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflow in playlistimport.cpp in Kaffeine Player 0.4.2 through 0.7.1 allows user-assisted attackers to execute arbitrary code via long HTTP request headers when Kaffeine is \"fetching remote playlists\", which triggers the overflow in the http_peek function."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de b\u00fafer en playlistimport.cpp en Kaffein Player 0.4.2 a 0.7.1 permite a atacantes con implicaci\u00f3n del usuario ejecutar c\u00f3digo de su elecci\u00f3n mediante peticiones HTTP largas cuando Kaffeine est\u00e1 \"obteniendo listas de reproducci\u00f3n remotas\", lo que que dispara un desbordamiento de b\u00fafer en la funci\u00f3n http_peek.\r\n"
    }
  ],
  "id": "CVE-2006-0051",
  "lastModified": "2025-04-03T01:03:51.193",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "HIGH",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 5.1,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 4.9,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": true,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": true
      }
    ]
  },
  "published": "2006-04-05T10:04:00.000",
  "references": [
    {
      "source": "security@debian.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/19525"
    },
    {
      "source": "security@debian.org",
      "url": "http://secunia.com/advisories/19540"
    },
    {
      "source": "security@debian.org",
      "url": "http://secunia.com/advisories/19542"
    },
    {
      "source": "security@debian.org",
      "url": "http://secunia.com/advisories/19549"
    },
    {
      "source": "security@debian.org",
      "url": "http://secunia.com/advisories/19557"
    },
    {
      "source": "security@debian.org",
      "url": "http://secunia.com/advisories/19571"
    },
    {
      "source": "security@debian.org",
      "url": "http://securitytracker.com/id?1015863"
    },
    {
      "source": "security@debian.org",
      "url": "http://www.debian.org/security/2006/dsa-1023"
    },
    {
      "source": "security@debian.org",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200604-04.xml"
    },
    {
      "source": "security@debian.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.kde.org/info/security/advisory-20060404-1.txt"
    },
    {
      "source": "security@debian.org",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:065"
    },
    {
      "source": "security@debian.org",
      "url": "http://www.novell.com/linux/security/advisories/2006_08_sr.html"
    },
    {
      "source": "security@debian.org",
      "url": "http://www.securityfocus.com/archive/1/430319/100/0/threaded"
    },
    {
      "source": "security@debian.org",
      "url": "http://www.securityfocus.com/bid/17372"
    },
    {
      "source": "security@debian.org",
      "url": "http://www.vupen.com/english/advisories/2006/1229"
    },
    {
      "source": "security@debian.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25631"
    },
    {
      "source": "security@debian.org",
      "url": "https://usn.ubuntu.com/268-1/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/19525"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/19540"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/19542"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/19549"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/19557"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/19571"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securitytracker.com/id?1015863"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.debian.org/security/2006/dsa-1023"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200604-04.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.kde.org/info/security/advisory-20060404-1.txt"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:065"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.novell.com/linux/security/advisories/2006_08_sr.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/430319/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/17372"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2006/1229"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25631"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://usn.ubuntu.com/268-1/"
    }
  ],
  "sourceIdentifier": "security@debian.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

Vulnerability from fkie_nvd
Published
2005-03-01 05:00
Modified
2025-04-03 01:03
Severity ?
Summary
Buffer overflow in the http_open function in Kaffeine before 0.5, whose code is also used in gxine before 0.3.3, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long Content-Type header for a Real Audio Media (.ram) playlist file.
References
cve@mitre.orghttp://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028061.html
cve@mitre.orghttp://secunia.com/advisories/13117/
cve@mitre.orghttp://security.gentoo.org/glsa/glsa-200411-14.xml
cve@mitre.orghttp://sourceforge.net/tracker/index.php?func=detail&aid=1060299&group_id=9655&atid=109655
cve@mitre.orghttp://www.securityfocus.com/bid/11528Patch, Vendor Advisory
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/17849
af854a3a-2127-422b-91ae-364da2661108http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028061.html
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/13117/
af854a3a-2127-422b-91ae-364da2661108http://security.gentoo.org/glsa/glsa-200411-14.xml
af854a3a-2127-422b-91ae-364da2661108http://sourceforge.net/tracker/index.php?func=detail&aid=1060299&group_id=9655&atid=109655
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/11528Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/17849
Impacted products
Vendor Product Version
kaffeine kaffeine_player 0.4.2
kaffeine kaffeine_player 0.4.3
kaffeine kaffeine_player 0.4.3b
kaffeine kaffeine_player 0.5_rc1
xine gxine 0.3
gentoo linux *


To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:kaffeine:kaffeine_player:0.4.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "789E99F5-9047-4B97-9F5D-0A83A5B2C264",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:kaffeine:kaffeine_player:0.4.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "C6AEDC59-1392-45A6-A498-07061345ED1D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:kaffeine:kaffeine_player:0.4.3b:*:*:*:*:*:*:*",
              "matchCriteriaId": "650E1BFF-C301-43FA-B6A0-FF14CFBC6E07",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:kaffeine:kaffeine_player:0.5_rc1:*:*:*:*:*:*:*",
              "matchCriteriaId": "E4D173DD-913A-4A32-B687-B4E2F7BBEB32",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:xine:gxine:0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "EDAC9445-062C-4146-9ADF-C5DB4AE9E9BC",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "647BA336-5538-4972-9271-383A0EC9378E",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflow in the http_open function in Kaffeine before 0.5, whose code is also used in gxine before 0.3.3, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long Content-Type header for a Real Audio Media (.ram) playlist file."
    }
  ],
  "id": "CVE-2004-1034",
  "lastModified": "2025-04-03T01:03:51.193",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 10.0,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 10.0,
        "obtainAllPrivilege": true,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2005-03-01T05:00:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028061.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/13117/"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://security.gentoo.org/glsa/glsa-200411-14.xml"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://sourceforge.net/tracker/index.php?func=detail\u0026aid=1060299\u0026group_id=9655\u0026atid=109655"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.securityfocus.com/bid/11528"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17849"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028061.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/13117/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://security.gentoo.org/glsa/glsa-200411-14.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://sourceforge.net/tracker/index.php?func=detail\u0026aid=1060299\u0026group_id=9655\u0026atid=109655"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.securityfocus.com/bid/11528"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17849"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}