This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2006-2200 →

DEBIAN-CVE-2006-2200

Stack-based buffer overflow in libmms, as used by (a) MiMMS 0.0.9 and (b) xine-lib 1.1.0 and earlier, allows remote attackers to cause a denial of ser...

Original description

The description as published by the source.

Stack-based buffer overflow in libmms, as used by (a) MiMMS 0.0.9 and (b) xine-lib 1.1.0 and earlier, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via the (1) send_command, (2) string_utf16, (3) get_data, and (4) get_media_packet functions, and possibly other functions.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 libmms

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2-7"}]}]

Debian:13 libmms

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2-7"}]}]

Debian:14 libmms

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2-7"}]}]

References

advisory security-tracker.debian.org