• info
• discussion
• exploit
• solution
• references

XMMS Skins Integer Overflow And Underflow Vulnerabilities

Solution:
Updates are available. Please see the references for more information.


XMMS XMMS 1.2.10

• Ubuntu xmms-dev_1.2.10+cvs20050209-2ubuntu2.1_amd64.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/x/xmms/xmms-dev_1.2.10+cvs 20050209-2ubuntu2.1_amd64.deb


• Ubuntu xmms-dev_1.2.10+cvs20050209-2ubuntu2.1_i386.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/x/xmms/xmms-dev_1.2.10+cvs 20050209-2ubuntu2.1_i386.deb


• Ubuntu xmms-dev_1.2.10+cvs20050209-2ubuntu2.1_powerpc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/x/xmms/xmms-dev_1.2.10+cvs 20050209-2ubuntu2.1_powerpc.deb


• Ubuntu xmms-dev_1.2.10+cvs20050209-2ubuntu2.1_sparc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/x/xmms/xmms-dev_1.2.10+cvs 20050209-2ubuntu2.1_sparc.deb


• Ubuntu xmms-dev_1.2.10+cvs20050809-4ubuntu5.1_amd64.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/x/xmms/xmms-dev_1.2.10+cvs 20050809-4ubuntu5.1_amd64.deb


• Ubuntu xmms-dev_1.2.10+cvs20050809-4ubuntu5.1_i386.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/x/xmms/xmms-dev_1.2.10+cvs 20050809-4ubuntu5.1_i386.deb


• Ubuntu xmms-dev_1.2.10+cvs20050809-4ubuntu5.1_powerpc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/x/xmms/xmms-dev_1.2.10+cvs 20050809-4ubuntu5.1_powerpc.deb


• Ubuntu xmms-dev_1.2.10+cvs20050809-4ubuntu5.1_sparc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/x/xmms/xmms-dev_1.2.10+cvs 20050809-4ubuntu5.1_sparc.deb


• Ubuntu xmms-dev_1.2.10+cvs20060429-1ubuntu2.1_amd64.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/x/xmms/xmms-dev_1.2.10+cvs 20060429-1ubuntu2.1_amd64.deb


• Ubuntu xmms-dev_1.2.10+cvs20060429-1ubuntu2.1_i386.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/x/xmms/xmms-dev_1.2.10+cvs 20060429-1ubuntu2.1_i386.deb


• Ubuntu xmms-dev_1.2.10+cvs20060429-1ubuntu2.1_powerpc.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/x/xmms/xmms-dev_1.2.10+cvs 20060429-1ubuntu2.1_powerpc.deb


• Ubuntu xmms-dev_1.2.10+cvs20060429-1ubuntu2.1_sparc.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/x/xmms/xmms-dev_1.2.10+cvs 20060429-1ubuntu2.1_sparc.deb


• Ubuntu xmms_1.2.10+cvs20050209-2ubuntu2.1_amd64.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/x/xmms/xmms_1.2.10+cvs2005 0209-2ubuntu2.1_amd64.deb


• Ubuntu xmms_1.2.10+cvs20050209-2ubuntu2.1_i386.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/x/xmms/xmms_1.2.10+cvs2005 0209-2ubuntu2.1_i386.deb


• Ubuntu xmms_1.2.10+cvs20050209-2ubuntu2.1_powerpc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/x/xmms/xmms_1.2.10+cvs2005 0209-2ubuntu2.1_powerpc.deb


• Ubuntu xmms_1.2.10+cvs20050209-2ubuntu2.1_sparc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/x/xmms/xmms_1.2.10+cvs2005 0209-2ubuntu2.1_sparc.deb


• Ubuntu xmms_1.2.10+cvs20050809-4ubuntu5.1_amd64.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/x/xmms/xmms_1.2.10+cvs2005 0809-4ubuntu5.1_amd64.deb


• Ubuntu xmms_1.2.10+cvs20050809-4ubuntu5.1_i386.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/x/xmms/xmms_1.2.10+cvs2005 0809-4ubuntu5.1_i386.deb


• Ubuntu xmms_1.2.10+cvs20050809-4ubuntu5.1_powerpc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/x/xmms/xmms_1.2.10+cvs2005 0809-4ubuntu5.1_powerpc.deb


• Ubuntu xmms_1.2.10+cvs20050809-4ubuntu5.1_sparc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/x/xmms/xmms_1.2.10+cvs2005 0809-4ubuntu5.1_sparc.deb


• Ubuntu xmms_1.2.10+cvs20060429-1ubuntu2.1_amd64.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/x/xmms/xmms_1.2.10+cvs2006 0429-1ubuntu2.1_amd64.deb


• Ubuntu xmms_1.2.10+cvs20060429-1ubuntu2.1_i386.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/x/xmms/xmms_1.2.10+cvs2006 0429-1ubuntu2.1_i386.deb


• Ubuntu xmms_1.2.10+cvs20060429-1ubuntu2.1_powerpc.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/x/xmms/xmms_1.2.10+cvs2006 0429-1ubuntu2.1_powerpc.deb


• Ubuntu xmms_1.2.10+cvs20060429-1ubuntu2.1_sparc.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/x/xmms/xmms_1.2.10+cvs2006 0429-1ubuntu2.1_sparc.deb

XMMS XMMS 1.2.9

• Mandriva lib64xmms1-1.2.9-5.1.C30mdk.x86_64.rpm
  Corporate 3.0/X86_64:
  http://www.mandriva.com/en/download


• Mandriva lib64xmms1-devel-1.2.9-5.1.C30mdk.x86_64.rpm
  Corporate 3.0/X86_64:
  http://www.mandriva.com/en/download


• Mandriva libxmms1-1.2.9-5.1.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva libxmms1-devel-1.2.9-5.1.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva xmms-1.2.9-5.1.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva xmms-1.2.9-5.1.C30mdk.x86_64.rpm
  Corporate 3.0/X86_64:
  http://www.mandriva.com/en/download


• Mandriva xmms-alsa-1.2.9-5.1.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva xmms-alsa-1.2.9-5.1.C30mdk.x86_64.rpm
  Corporate 3.0/X86_64:
  http://www.mandriva.com/en/download


• Mandriva xmms-diskwriter-1.2.9-5.1.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva xmms-diskwriter-1.2.9-5.1.C30mdk.x86_64.rpm
  Corporate 3.0/X86_64:
  http://www.mandriva.com/en/download


• Mandriva xmms-esd-1.2.9-5.1.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva xmms-esd-1.2.9-5.1.C30mdk.x86_64.rpm
  Corporate 3.0/X86_64:
  http://www.mandriva.com/en/download


• Mandriva xmms-mesa-1.2.9-5.1.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva xmms-mesa-1.2.9-5.1.C30mdk.x86_64.rpm
  Corporate 3.0/X86_64:
  http://www.mandriva.com/en/download


• Mandriva xmms-mikmod-1.2.9-5.1.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva xmms-mikmod-1.2.9-5.1.C30mdk.x86_64.rpm
  Corporate 3.0/X86_64:
  http://www.mandriva.com/en/download