| Package | Affected versions | Patched versions |
|---|---|---|
| kaffeine player | = 0.4.2= 0.4.3= 0.4.3b= 0.5_rc1= 0.7.1 |
Buffer overflow in playlistimport.cpp in Kaffeine Player 0.4.2 through 0.7.1 allows user-assisted attackers to execute arbitrary code via long HTTP request headers when Kaffeine is "fetching remote playlists", which triggers the overflow in the http_peek function.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free