Buffer overflow in playlistimport.cpp in Kaffeine Player 0.4.2 through 0.7.1 allows user-assisted attackers to execute arbitrary code via long HTTP request headers when Kaffeine is "fetching remote playlists", which triggers the overflow in the http_peek function.

Marcus Meissner discovered that kaffeine, a versatile media player for KDE 3, contains an unchecked buffer that can be overwritten remotely when fetching remote RAM playlists which can cause the execution of arbitrary code.

The KDE team reports :

Kaffeine can produce a buffer overflow in http_peek() while creating HTTP request headers for fetching remote playlists, which under certain circumstances could be used to crash the application and/or execute arbitrary code.

Marcus Meissner discovered a buffer overflow in the http_peek() function. By tricking an user into opening a specially crafted playlist URL with Kaffeine, a remote attacker could exploit this to execute arbitrary code with the user's privileges.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Marcus Meissner discovered Kaffeine contains an unchecked buffer while creating HTTP request headers for fetching remote RAM playlists, which allows overflowing a heap allocated buffer. As a result, remotely supplied RAM playlists can be used to execute arbitrary code on the client machine.

Updated packages have been patched to correct this issue.

The remote host is affected by the vulnerability described in GLSA-200604-04 (Kaffeine: Buffer overflow)

    Kaffeine uses an unchecked buffer when fetching remote RAM     playlists via HTTP.
  Impact :

    A remote attacker could entice a user to play a specially crafted     RAM playlist resulting in the execution of arbitrary code with the     permissions of the user running the application.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
22565	Debian DSA-1023-1 : kaffeine - buffer overflow	Nessus	Debian Local Security Checks	medium
21426	FreeBSD : kaffeine -- buffer overflow vulnerability (4bfcd857-c628-11da-b2fb-000e0c2e438a)	Nessus	FreeBSD Local Security Checks	medium
21204	Ubuntu 5.04 / 5.10 : kaffeine vulnerability (USN-268-1)	Nessus	Ubuntu Local Security Checks	medium
21200	Mandrake Linux Security Advisory : kaffeine (MDKSA-2006:065)	Nessus	Mandriva Local Security Checks	medium
21197	GLSA-200604-04 : Kaffeine: Buffer overflow	Nessus	Gentoo Local Security Checks	medium

Detections

Analytics

CVE-2006-0051

critical

Tenable Plugins

medium

medium

medium

medium

medium