CVE-2006-2802: Xine Gxine

Medium severity, CVSS 5.0. EPSS: 11.1% chance of exploitation in the next 30 days.

Buffer overflow in the HTTP Plugin (xineplug_inp_http.so) for xine-lib 1.1.1 allows remote attackers to cause a denial of service (application crash) via a long reply from an HTTP server, as demonstrated using gxine 0.5.6.

Affected products

• Xine Gxine: version 0.5.6 only
• Xine Xine-Lib: version 1.0.1 only; version 1.0.2 only; version 1.1.0 only; version 1.1.1 only

Published 2006-06-03. Last modified 2026-06-16.