Unscored severity · published Jun 28, 2006
CVE-2006-2200
Stack-based buffer overflow in libmms, as used by (a) MiMMS 0.0.9 and (b) xine-lib 1.1.0 and earlier, allows remote attackers to cause a denial of service (application crash) and…
–
CVSS
4.3%
EPSS
No
On KEV
Description
Stack-based buffer overflow in libmms, as used by (a) MiMMS 0.0.9 and (b) xine-lib 1.1.0 and earlier, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via the (1) send_command, (2) string_utf16, (3) get_data, and (4) get_media_packet functions, and possibly other functions.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.3% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MI
Mimms · Mimms
0.0.9 · source: NVD
XI
Xine-lib · Xine
1.1.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-2200
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-2200
bugs.debian.org
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=374577
Vendor Advisory
http://secunia.com/advisories/20749
Vendor Advisory
http://secunia.com/advisories/20948
Vendor Advisory
http://secunia.com/advisories/20964
Vendor Advisory
http://secunia.com/advisories/21023
Vendor Advisory
http://secunia.com/advisories/21036