| Package | Affected versions | Patched versions |
|---|---|---|
| xine-lib | = 0.9.13= 1.0= 1.0.1= 1.0.2= 1.1.0 |
Format string vulnerability in input_cdda.c in xine-lib 1-beta through 1-beta 3, 1-rc, 1.0 through 1.0.2, and 1.1.1 allows remote servers to execute arbitrary code via format string specifiers in metadata in CDDB server responses when the victim plays a CD.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free