CVE-2004-1187: Buffer Overflow

First published: Wed Dec 22 2004(Updated: )

Heap-based buffer overflow in the pnm_get_chunk function for xine 0.99.2, and other packages such as MPlayer that use the same code, allows remote attackers to execute arbitrary code via long PNA_TAG values, a different vulnerability than CVE-2004-1188.

Credit: cve@mitre.org

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-historical
• vendor/xine
• product/xine
• canonical/xine xine
• vendor/mplayer
• product/mplayer
• canonical/mplayer mplayer
• product/xine-lib
• canonical/xine xine-lib
• vendor/mandrakesoft
• product/mandrake linux
• canonical/mandrakesoft mandrake linux
• collector/nvd-index
• agent/weakness
• agent/severity
• agent/author
• agent/description
• agent/last-modified-date
• agent/first-publish-date
• agent/softwarecombine
• agent/remedy
• agent/type
• agent/event
• agent/references
• agent/tags
• collector/mitre-cve
• source/MITRE
• version/xine xine/1_rc6a
• version/xine xine/1_beta9
• version/mplayer mplayer/0.92
• version/xine xine/0.9.18
• version/xine xine/1_beta3
• version/xine xine/1_rc0a
• version/xine xine-lib/1_beta7
• version/mplayer mplayer/1.0_pre2
• version/mplayer mplayer/0.90
• version/xine xine/1_rc7
• version/mplayer mplayer/1.0_pre1
• version/mplayer mplayer/0.90_rc
• version/xine xine-lib/1_rc3
• version/xine xine/1_rc4
• version/xine xine-lib/1_beta9
• version/mplayer mplayer/1.0_pre5try2
• version/xine xine/1_alpha
• version/xine xine-lib/1_rc3b
• version/xine xine-lib/1_alpha
• version/xine xine/1_beta4
• version/mplayer mplayer/head_cvs
• version/mplayer mplayer/0.92.1
• version/xine xine-lib/0.9.8
• version/xine xine-lib/1_beta4
• version/xine xine-lib/1_rc5
• version/xine xine/1_rc3b
• version/xine xine/1_beta2
• version/xine xine/0.9.8
• version/mplayer mplayer/1.0_pre3
• version/xine xine/1_rc3a
• version/xine xine-lib/1_rc6a
• version/xine xine/1_rc2
• version/xine xine/1_rc8
• version/xine xine-lib/1_rc3c
• version/mplayer mplayer/0.92_cvs
• version/xine xine/1_beta10
• version/mplayer mplayer/1.0_pre5
• version/xine xine/1_beta12
• version/mplayer mplayer/0.91
• version/xine xine/1_beta11
• version/xine xine/1_beta7
• version/xine xine/1_beta8
• version/xine xine/0.9.13
• version/xine xine/1_rc1
• version/xine xine-lib/1_rc2
• version/xine xine/1_rc5
• version/xine xine-lib/1_beta2
• version/xine xine-lib/1_rc0
• version/xine xine-lib/1_beta5
• version/xine xine-lib/1_beta11
• version/mplayer mplayer/1.0_pre5try1
• version/xine xine/1_beta6
• version/xine xine-lib/0.99
• version/xine xine/1_beta1
• version/xine xine-lib/0.9.13
• version/xine xine-lib/1_rc6
• version/mplayer mplayer/1.0_pre3try2
• version/xine xine/1_rc6
• version/xine xine-lib/1_beta6
• version/xine xine/1_rc3
• version/xine xine-lib/1_rc1
• version/xine xine-lib/1_rc3a
• version/xine xine-lib/1_beta1
• version/xine xine/1_rc0
• version/xine xine-lib/1_beta12
• version/xine xine-lib/1_rc4
• version/mplayer mplayer/0.90_pre
• version/xine xine/1_beta5
• version/xine xine-lib/1_beta10
• version/mplayer mplayer/0.90_rc4
• version/xine xine-lib/1_beta8
• version/mplayer mplayer/1.0_pre4
• version/xine xine-lib/1_beta3
• version/xine xine-lib/1_rc7
• version/mandrakesoft mandrake linux/10.1
• version/mandrakesoft mandrake linux/10.0