NetSight
IP …
medium5.0Public exploit code

CVE-2004-1951

xine 1.x alpha, 1.x beta, and 1.0rc through 1.0rc3a, and xine-ui 0.9.21 to 0.9.23 allows remote attackers to overwrite arbitrary files via the (1) audio.sun_au…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

xine 1.x alpha, 1.x beta, and 1.0rc through 1.0rc3a, and xine-ui 0.9.21 to 0.9.23 allows remote attackers to overwrite arbitrary files via the (1) audio.sun_audio_device or (2) dxr3.devicename options in an MRL link.

Affected products

VendorProductAffected versions
XineXine
Versions 0.9.8, 0.9.13, 1_beta1, 1_beta2, 1_beta3, 1_beta4
XineXine-Lib
Versions 1_rc2, 1_rc3a, 1_rc3b, 1_rc3c
XineXine-Ui
Versions 0.9.21, 0.9.22, 0.9.23

References