Kaffeine RAM playlist file buffer overflow
| kaffeine-ram-bo (17849) |  High Risk |
Description:
Kaffeine is vulnerable to a buffer overflow in the kaffeine/http.c file. By creating a RAM (Real Audio Media) playlist file containing specially-crafted mimetypes for the .ram extension, a remote attacker could overflow a buffer and possibly execute arbitrary code on the system or cause a denial of service, once the file is opened.
Note: gxine version 0.3.3 is also affected by this vulnerability.
Consequences:
Gain Access
Remedy:
For gxine 0.3.3:
Apply the patch for this vulnerability, available from the SourceForge Web site. See References.
For Gentoo Linux:
Upgrade to the latest version of kaffeine or gxine, as listed in GLSA 200411-14. See References.
For other distributions:
Contact your vendor for upgrade or patch information.
References:
- Full-Disclosure Mailing List Mon Oct 25 2004 - 20:06:24 CDT: Kaffeine Media Player Conteny Type overflow.
- SourceForge.net: Kaffeine Player.
- SourceForge.net: Kaffeine Player Homepage.
- BID-11528: Kaffeine Remote Buffer Overflow Vulnerability
- CVE-2004-1034: Buffer overflow in the http_open function in Kaffeine before 0.5, whose code is also used in gxine before 0.3.3, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long Content-Type header for a Real Audio Media (.ram) playlist file.
- GLSA-200411-14: Kaffeine, gxine: Remotely exploitable buffer overflow
- SA13117: gxine "http_open()" Buffer Overflow Vulnerability
Platforms Affected:
- Gentoo Linux
- gxine gxine 0.3.3
- Kaffeine Kaffeine 0.4.2
- SUSE SuSE Linux 9.1
Reported:
Oct 25, 2004
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net