CVE-2007-0254

NameCVE-2007-0254
DescriptionFormat string vulnerability in the errors_create_window function in errors.c in xine-ui allows attackers to execute arbitrary code via unknown vectors.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs407369

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
xine-ui (PTS)buster0.99.9-1.3fixed
bullseye0.99.9-2fixed
bookworm0.99.14-1fixed
sid, trixie0.99.14-2fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
xine-uisource(unstable)0.99.4+dfsg+cvs20061111-1low407369

Notes

If've verified the Etch version to contain the necessary format strings

Search for package or bug name: Reporting problems