1. Gentoo Linux Security Advisory
| Advisory Reference | GLSA 200505-19 / gxine |
| Release Date | May 26, 2005 |
| Latest Revision | May 26, 2005: 01 |
| Impact | normal |
| Exploitable | remote |
| Package | Vulnerable versions | Unaffected versions | Architecture(s) |
| media-video/gxine | < 0.4.4 | revision >= 0.3.3-r2, revision >= 0.4.1-r1, >= 0.4.4 | All supported architectures |
Related bugreports: #93532
A format string vulnerability in gxine could allow a remote attacker to execute arbitrary code.
gxine is a GTK+ and xine-lib based media player.
Exworm discovered that gxine insecurely implements formatted printing in the hostname decoding function.
A remote attacker could entice a user to open a carefully crafted file with gxine, possibly leading to the execution of arbitrary code.
There is no known workaround at this time.
All gxine users should upgrade to the latest available version:
Code Listing 3.1: Resolution |
# emerge --sync # emerge --ask --oneshot --verbose media-video/gxine |