CVE-2006-0051

2006-04-0500:00:00

ubuntu.com

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.038 Low

EPSS

Percentile

92.0%

JSON

Buffer overflow in playlistimport.cpp in Kaffeine Player 0.4.2 through
0.7.1 allows user-assisted attackers to execute arbitrary code via long
HTTP request headers when Kaffeine is “fetching remote playlists”, which
triggers the overflow in the http_peek function.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchkaffeine< 0.7.1-1.3ubuntu10UNKNOWN
ubuntu6.10noarchkaffeine< 0.7.1-1.3ubuntu10UNKNOWN
ubuntu7.04noarchkaffeine< 0.7.1-1.3ubuntu10UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	kaffeine	< 0.7.1-1.3ubuntu10	UNKNOWN
ubuntu	6.10	noarch	kaffeine	< 0.7.1-1.3ubuntu10	UNKNOWN
ubuntu	7.04	noarch	kaffeine	< 0.7.1-1.3ubuntu10	UNKNOWN