Approved changes feed: RSS · Atom

cpe:2.3:a:kaffeine:kaffeine_player:0.5_rc1:*:*:*:*:*:*:*

part: a version: 0.5_rc1 update: *

VendorKaffeine (b5909b6c-06c8-5c41-9fc1-327418bfb780)
ProductKaffeine Player (56f6d7ec-9b08-5b97-81c5-da9fe0270368)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/kaffeine purl2cpe 2026-06-01 10:12:35.245230
pkg:deb/ubuntu/kaffeine purl2cpe 2026-06-01 10:12:35.245232
pkg:docker/maurochehab/kaffeine purl2cpe 2026-06-01 10:12:35.245233
pkg:github/kde/kaffeine purl2cpe 2026-06-01 10:12:35.245235
pkg:rpm/opensuse/kaffeine purl2cpe 2026-06-01 10:12:35.245236
pkg:sourceforge/kaffeine purl2cpe 2026-06-01 10:12:35.245237

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-0051 vulnerable 2026-06-08 04:48:45.818533 Details available
Buffer overflow in playlistimport.cpp in Kaffeine Player 0.4.2 through 0.7.1 allows user-assisted attackers to execute arbitrary code via long HTTP request headers when Kaffeine is "fetching remote playlists", which triggers the overflow in the http_peek function.
Published: 2006-04-05T10:00:00.000Z
Updated: 2024-08-07T16:18:20.701Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1034 vulnerable 2026-06-08 04:47:52.555835 Details available
Buffer overflow in the http_open function in Kaffeine before 0.5, whose code is also used in gxine before 0.3.3, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long Content-Type header for a Real Audio Media (.ram) playlist file.
Published: 2004-11-16T05:00:00.000Z
Updated: 2024-08-08T00:39:00.753Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.