CVE-2007-0255
XINE 0.99.4 allows user-assisted remote attackers to cause a denial of service (application crash...
XINE 0.99.4 allows user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a certain M3U file that contains a long #EXTINF line and contains format string specifiers in an invalid udp:// URI, possibly a variant of CVE-2007-0017.
Exploit likelihood
What each source reports
NVD Score used
XINE 0.99.4 allows user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a certain M3U file that contains a long #EXTINF line and contains format string specifiers in an invalid udp:// URI, possibly a variant of CVE-2007-0017.
- Record
CVE-2007-0255- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
XINE 0.99.4 allows user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a certain M3U file that contains a long #EXTINF line and contains format string specifiers in an invalid udp:// URI, possibly a variant of CVE-2007-0017.
- Record
CVE-2007-0255- Updated
- 2026-11-02
EUVDEUVD-2007-0257 No score
XINE 0.99.4 allows user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a certain M3U file that contains a long #EXTINF line and contains format string specifiers in an invalid udp:// URI, possibly a variant of CVE-2007-0017.
- Record
EUVD-2007-0257- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3m83-fp4v-w9rv No score
XINE 0.99.4 allows user-assisted remote attackers to cause a denial of service (application crash...
XINE 0.99.4 allows user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a certain M3U file that contains a long #EXTINF line and contains format string specifiers in an invalid udp:// URI, possibly a variant of CVE-2007-0017.
- Record
GHSA-3m83-fp4v-w9rv- Updated
- 2026-11-02
OSVUBUNTU-CVE-2007-0255 No score
XINE 0.99.4 allows user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a certain M3U file that contains a long #EXTINF line and contains format string specifiers in an invalid udp:// URI, possibly a variant of CVE-2007-0017.
- Record
UBUNTU-CVE-2007-0255- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xine-uiUbuntu:16.04:LTS |
All versions, plus listed versions 0.99.9-1.2 |
None known |
xine-uiUbuntu:18.04:LTS |
All versions, plus listed versions 0.99.9-1.3 |
None known |
xine-uiUbuntu:20.04:LTS |
All versions, plus listed versions 0.99.9-1.3build1 |
None known |
xine-uiUbuntu:22.04:LTS |
All versions, plus listed versions 0.99.9-20.99.12-20.99.13-1 |
None known |
xine-uiUbuntu:24.04:LTS |
All versions, plus listed versions 0.99.14-10.99.14-20.99.14-2build20.99.14+hg20240403-1 |
None known |
xine-uiUbuntu:25.10 |
All versions, plus listed versions 0.99.14+hg20240403-1 |
None known |
xine-uiUbuntu:26.10 |
All versions, plus listed versions 0.99.14+hg20251015-1 |
None known |
xine-uiUbuntu:26.04:LTS |
All versions, plus listed versions 0.99.14+hg20240403-10.99.14+hg20251015-1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-0255 is a high vulnerability (CVSS 9.3) in Xine, published January 16, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.04%, the 90th percentile. No source names a fixed version.