CVE-2006-1664

xine-lib - Buffer Overflow via Crafted MPEG Stream

Title source: manual
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-1664. PoCs published by Federico L. Bossi Bonin.

AI-analyzed exploit summary This Perl script is a proof-of-concept exploit for CVE-2008-1110, targeting a buffer overflow vulnerability in Libxine <= 1.14. It crafts a malicious MPEG file to trigger a segmentation fault, demonstrating the potential for arbitrary code execution.

Description

Buffer overflow in xine_list_delete_current in libxine 1.14 and earlier, as distributed in xine-lib 1.1.1 and earlier, allows remote attackers to execute arbitrary code via a crafted MPEG stream.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Federico L. Bossi Bonin · perldoslinux
https://www.exploit-db.com/exploits/1641

This Perl script is a proof-of-concept exploit for CVE-2008-1110, targeting a buffer overflow vulnerability in Libxine <= 1.14. It crafts a malicious MPEG file to trigger a segmentation fault, demonstrating the potential for arbitrary code execution.

Classification
Working Poc 90%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Libxine <= 1.14
No auth needed
Prerequisites: A vulnerable version of Libxine installed on the target system
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (13)

Core 13
Core References
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/19856
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/28666
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/25670
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/19853
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/17370
Issue Tracking x_refsource_confirm
http://bugs.gentoo.org/show_bug.cgi?id=128838
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1015868
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/1641
Third Party Advisory vendor-advisory x_refsource_gentoo
http://www.gentoo.org/security/en/glsa/glsa-200604-16.xml

Scores

EPSS 0.1464
EPSS Percentile 96.2%

Details

Status published
Products (7)
xine/xine-lib 0.9.13
xine/xine-lib 1.0
xine/xine-lib 1.0.1
xine/xine-lib 1.0.2
xine/xine-lib 1.0.3a
xine/xine-lib 1.1.0
xine/xine-lib 1.1.1
Published Apr 07, 2006
Tracked Since Feb 18, 2026