CVE-2004-1034

2005-03-0105:00:00

Debian Security Bug Tracker

security-tracker.debian.org

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.055 Low

EPSS

Percentile

93.3%

JSON

Buffer overflow in the http_open function in Kaffeine before 0.5, whose code is also used in gxine before 0.3.3, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long Content-Type header for a Real Audio Media (.ram) playlist file.

OSVersionArchitecturePackageVersionFilename
Debian12allkaffeine< 0.4.3.1-3kaffeine_0.4.3.1-3_all.deb
Debian11allkaffeine< 0.4.3.1-3kaffeine_0.4.3.1-3_all.deb
Debian999allkaffeine< 0.4.3.1-3kaffeine_0.4.3.1-3_all.deb
Debian13allkaffeine< 0.4.3.1-3kaffeine_0.4.3.1-3_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	kaffeine	< 0.4.3.1-3	kaffeine_0.4.3.1-3_all.deb
Debian	11	all	kaffeine	< 0.4.3.1-3	kaffeine_0.4.3.1-3_all.deb
Debian	999	all	kaffeine	< 0.4.3.1-3	kaffeine_0.4.3.1-3_all.deb
Debian	13	all	kaffeine	< 0.4.3.1-3	kaffeine_0.4.3.1-3_all.deb