Integer underflow in X MultiMedia System (xmms) 1.2.10 allows user-assisted remote attackers to execute arbitrary code via crafted header information in a skin bitmap image, which results in a stack-based buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade xmms | Dec 10, 2025 | Mar 6, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 21, 2007 |
| Suse | — | Upgrade xmms-libUpgrade xmmsUpgrade suse-releaseUpgrade xmms-develUpgrade xmms-x86Upgrade xmms-32bitUpgrade xmms-lib-32bitUpgrade xmms-64bitUpgrade xmms-lib-64bit | Feb 17, 2015 | Mar 21, 2007 |
| Ubuntu | — | Upgrade xmms | Nov 8, 2024 | Mar 21, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub