{"id":"UBUNTU-CVE-2007-0255","details":"XINE 0.99.4 allows user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a certain M3U file that contains a long #EXTINF line and contains format string specifiers in an invalid udp:// URI, possibly a variant of CVE-2007-0017.","modified":"2026-05-20T16:03:04.266624043Z","published":"2007-01-16T23:28:00Z","upstream":["CVE-2007-0255"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2007-0255"},{"type":"REPORT","url":"http://xine.sourceforge.net/security"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2007-0255"}],"affected":[{"package":{"name":"xine-ui","ecosystem":"Ubuntu:16.04:LTS","purl":"pkg:deb/ubuntu/xine-ui?arch=source&distro=xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.99.9-1.2"],"ecosystem_specific":{"binaries":[{"binary_name":"xine-console","binary_version":"0.99.9-1.2"},{"binary_name":"xine-ui","binary_version":"0.99.9-1.2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2007/UBUNTU-CVE-2007-0255.json"}},{"package":{"name":"xine-ui","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/xine-ui?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.99.9-1.3"],"ecosystem_specific":{"binaries":[{"binary_name":"xine-console","binary_version":"0.99.9-1.3"},{"binary_name":"xine-ui","binary_version":"0.99.9-1.3"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2007/UBUNTU-CVE-2007-0255.json"}},{"package":{"name":"xine-ui","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/xine-ui?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.99.9-1.3build1"],"ecosystem_specific":{"binaries":[{"binary_version":"0.99.9-1.3build1","binary_name":"xine-console"},{"binary_name":"xine-ui","binary_version":"0.99.9-1.3build1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2007/UBUNTU-CVE-2007-0255.json"}},{"package":{"name":"xine-ui","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/xine-ui?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.99.9-2","0.99.12-2","0.99.13-1"],"ecosystem_specific":{"binaries":[{"binary_version":"0.99.13-1","binary_name":"xine-console"},{"binary_version":"0.99.13-1","binary_name":"xine-ui"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2007/UBUNTU-CVE-2007-0255.json"}},{"package":{"name":"xine-ui","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/xine-ui?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.99.14-1","0.99.14-2","0.99.14-2build2","0.99.14+hg20240403-1"],"ecosystem_specific":{"binaries":[{"binary_version":"0.99.14+hg20240403-1","binary_name":"xine-console"},{"binary_version":"0.99.14+hg20240403-1","binary_name":"xine-ui"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2007/UBUNTU-CVE-2007-0255.json"}},{"package":{"name":"xine-ui","ecosystem":"Ubuntu:25.10","purl":"pkg:deb/ubuntu/xine-ui?arch=source&distro=questing"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.99.14+hg20240403-1"],"ecosystem_specific":{"binaries":[{"binary_name":"xine-console","binary_version":"0.99.14+hg20240403-1"},{"binary_version":"0.99.14+hg20240403-1","binary_name":"xine-ui"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2007/UBUNTU-CVE-2007-0255.json"}},{"package":{"name":"xine-ui","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/xine-ui?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.99.14+hg20240403-1","0.99.14+hg20251015-1"],"ecosystem_specific":{"binaries":[{"binary_name":"xine-console","binary_version":"0.99.14+hg20251015-1"},{"binary_version":"0.99.14+hg20251015-1","binary_name":"xine-ui"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2007/UBUNTU-CVE-2007-0255.json"}}],"schema_version":"1.7.5","severity":[{"type":"Ubuntu","score":"medium"}]}