CVE:CVE-2004-1034
CNNVD:CNNVD-200503-020
Kaffeine 0.5之前版本的http_open函数(其代码在gxine 0.3.3之前版本也有使用)中存在缓冲区溢出，远程攻击者可以通过Real Audio Media (.ram)播放列表文件的长Content-Type标头，实施拒绝服务攻击(应用程序崩溃)并有可能执行任意代码。
solution:Upgrade kaffeine kaffeine_player to a higher version than 0.4.2,0.4.3,0.4.3b,0.5_rc1,and avoid the version 0.4.2,0.4.3,0.4.3b,0.5_rc1; Upgrade xine gxine to a higher version than 0.3,and avoid the version 0.3; Upgrade gentoo linux to a higher version than *