Back to Database
Status published
High
CVE-2005-1692
Format string vulnerability in gxine 0.4.1 through 0.4.4, and other...
Vulnerability Description
Format string vulnerability in gxine 0.4.1 through 0.4.4, and other versions down to 0.3, allows remote attackers to execute arbitrary code via a ram file with a URL whose hostname contains format string specifiers.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-1692
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.securityfocus.com/bid/13707
- http://www.0xbadexworm.org/adv/gxinefmt.txt
- http://www.osvdb.org/16747
- http://www.vupen.com/english/advisories/2005/0626
- http://security.gentoo.org/glsa/glsa-200505-19.xml
- http://cvs.sourceforge.net/viewcvs.py/xine/gnome-xine/ChangeLog?rev=HEAD&content-type=text/vnd.viewcvs-markup
- http://secunia.com/advisories/15451
- http://marc.info/?l=bugtraq&m=111670637812128&w=2
More from xine
View All →CVE-2009-1274
Integer overflow in the qt_error parse_trak_atom function in demuxers/demux_qt.c in...
Medium
5
CVE-2009-0698
Integer overflow in the 4xm demuxer (demuxers/demux_4xm.c) in xine-lib 1.1.16.1...
High
7.5
CVE-2008-5248
xine-lib before 1.1.15 allows remote attackers to cause a denial...
Medium
4.3
CVE-2008-5247
The real_parse_audio_specific_data function in demux_real.c in xine-lib 1.1.12, and other...
Medium
4.3
CVE-2008-5246
Multiple heap-based buffer overflows in xine-lib before 1.1.15 allow remote...
Critical
9.3
Affected Vendor
xine
View all reports →Affected Software
gxine
Vulnerable Versions:
0.41, 0.42, 0.43, 0.44
Timeline
Official Publish:
May 24th, 2005
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.