This script is Copyright (C) 2005 Tenable Network Security, Inc.
Family
Slackware Local Security Checks
Plugin ID
19952
Bugtraq ID
CVE ID
Description:
New xine-lib packages are available for Slackware 9.1, 10.0, 10.1, 10.2,
and -current to fix a security issue. A format string bug may allow the
execution of arbitrary code as the user running a xine-lib linked
application. The attacker must provide (by uploading or running a server)
specially crafted CDDB information and then get the user to play the
referenced audio CD.