CVE-2006-0051

2006-04-0510:04:00

[email protected]

web.nvd.nist.gov

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

AI Score

7.7

Confidence

Low

EPSS

0.029

Percentile

90.9%

JSON

Buffer overflow in playlistimport.cpp in Kaffeine Player 0.4.2 through 0.7.1 allows user-assisted attackers to execute arbitrary code via long HTTP request headers when Kaffeine is “fetching remote playlists”, which triggers the overflow in the http_peek function.

Affected configurations

Nvd

Node

kaffeinekaffeine_playerMatch0.4.2

kaffeinekaffeine_playerMatch0.4.3

kaffeinekaffeine_playerMatch0.4.3b

kaffeinekaffeine_playerMatch0.5_rc1

kaffeinekaffeine_playerMatch0.7.1

VendorProductVersionCPE
kaffeinekaffeine_player0.4.2cpe:2.3:a:kaffeine:kaffeine_player:0.4.2:*:*:*:*:*:*:*
kaffeinekaffeine_player0.4.3cpe:2.3:a:kaffeine:kaffeine_player:0.4.3:*:*:*:*:*:*:*
kaffeinekaffeine_player0.4.3bcpe:2.3:a:kaffeine:kaffeine_player:0.4.3b:*:*:*:*:*:*:*
kaffeinekaffeine_player0.5_rc1cpe:2.3:a:kaffeine:kaffeine_player:0.5_rc1:*:*:*:*:*:*:*
kaffeinekaffeine_player0.7.1cpe:2.3:a:kaffeine:kaffeine_player:0.7.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
kaffeine	kaffeine_player	0.4.2	cpe:2.3:a:kaffeine:kaffeine_player:0.4.2:::::::*
kaffeine	kaffeine_player	0.4.3	cpe:2.3:a:kaffeine:kaffeine_player:0.4.3:::::::*
kaffeine	kaffeine_player	0.4.3b	cpe:2.3:a:kaffeine:kaffeine_player:0.4.3b:::::::*
kaffeine	kaffeine_player	0.5_rc1	cpe:2.3:a:kaffeine:kaffeine_player:0.5_rc1:::::::*
kaffeine	kaffeine_player	0.7.1	cpe:2.3:a:kaffeine:kaffeine_player:0.7.1:::::::*