CVE-2006-2200: Stack-based buffer overflow in libmms, as used by (a) MiMMS 0.0.9 and (b) xine-lib 1.1.0 and earlier, allows remote attackers to cause a denial of service…

PriorityP429medium5.1CVSS 2.0

AVNACHAuNCPIPAP

EPSS

4.26%

89.8th percentile

Stack-based buffer overflow in libmms, as used by (a) MiMMS 0.0.9 and (b) xine-lib 1.1.0 and earlier, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via the (1) send_command, (2) string_utf16, (3) get_data, and (4) get_media_packet functions, and possibly other functions.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
debian	libmms	< libmms 0.2-7 (bookworm)	libmms 0.2-7 (bookworm)
mimms	mimms	—	—
xine	xine-lib	—	—

CVSS provenance

nvdv2.05.1MEDIUMAV:N/AC:H/Au:N/C:P/I:P/A:P

osv5.1MEDIUM

vendor_debian5.1MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.