CVE-2006-0051: Kaffeine Player

Medium severity, CVSS 5.1. EPSS: 3.6% chance of exploitation in the next 30 days.

Buffer overflow in playlistimport.cpp in Kaffeine Player 0.4.2 through 0.7.1 allows user-assisted attackers to execute arbitrary code via long HTTP request headers when Kaffeine is "fetching remote playlists", which triggers the overflow in the http_peek function.

Affected products

• Kaffeine Kaffeine Player: version 0.4.2 only; version 0.4.3 only; version 0.4.3b only; version 0.5_rc1 only; version 0.7.1 only

Published 2006-04-05. Last modified 2026-06-16.