CVE-2004-1188: Buffer Overflow
The pnmgetchunk function in xine 0.99.2 and earlier, and other packages such as MPlayer that use the same code, does not properly verify that the chunk size is less than the PREAMBLESIZE, which causes a read operation with a negative length that leads to a buffer overflow via (1) RMFTAG, (2) DATATAG, (3) PROPTAG, (4) MDPRTAG, and (5) CONTTAG values, a different vulnerability than CVE-2004-1187.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2004-1188?
CVE-2004-1188 has a moderate severity rating as it can lead to a buffer overflow, which can impact system stability and security.
How do I fix CVE-2004-1188?
To fix CVE-2004-1188, update to the latest version of xine or MPlayer, as they have released patches that address this vulnerability.
What software is affected by CVE-2004-1188?
CVE-2004-1188 affects several versions of xine and MPlayer, including xine versions before 1.0 and MPlayer versions before 1.0.
What are the potential consequences of CVE-2004-1188?
The potential consequences of CVE-2004-1188 include arbitrary code execution, data corruption, and denial of service due to a buffer overflow.
How can I detect if my system is vulnerable to CVE-2004-1188?
You can detect vulnerability to CVE-2004-1188 by checking the version of xine or MPlayer installed on your system and comparing it to the versioning data in the CVE description.