GLSA-200612-02 : xine-lib: Buffer overflow

This script is Copyright (C) 2006-2015 Tenable Network Security, Inc.

Synopsis :

The remote Gentoo host is missing one or more security-related

Description :

The remote host is affected by the vulnerability described in GLSA-200612-02
(xine-lib: Buffer overflow)

A possible buffer overflow has been reported in the Real Media input

Impact :

An attacker could exploit this vulnerability by enticing a user into
loading a specially crafted stream with xine or an application using
xine-lib. This can lead to a Denial of Service and possibly the
execution of arbitrary code with the rights of the user running the

Workaround :

There is no known workaround at this time.

See also :

Solution :

All xine-lib users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose '>=media-libs/xine-lib-1.1.2-r3'

Risk factor :

High / CVSS Base Score : 7.5
CVSS Temporal Score : 6.5
Public Exploit Available : false

Family: Gentoo Local Security Checks

Nessus Plugin ID: 23796 (gentoo_GLSA-200612-02.nasl)

Bugtraq ID: 21435

CVE ID: CVE-2006-6172