Patch for the xine/gxine CD player that was found susceptible to a remote format string bug. The vulnerable code is found in the xine-lib library that both xine and gxine use. The vulnerable versions are at least xine-lib-0.9.13, 1.0, 1.0.1, 1.0.2 and 1.1.0.
cd292167e0ca6e7910e1cf32091e3a27--- src/input/input_cdda.c.old 2005-05-28 11:26:59.000000000 +0200
+++ src/input/input_cdda.c 2005-10-02 01:43:47.921856832 +0200
@@ -1473,7 +1473,7 @@ static void _cdda_save_cached_cddb_infos
return;
}
else {
- fprintf(fd, filecontent);
+ fprintf(fd, "%s", filecontent);
fclose(fd);
}
© 2012 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed
Comments
No comments yet, be the first!