CVE-2004-1475: Buffer Overflow
Published Dec 31, 2004
·Updated
Multiple stack-based buffer overflows in xine-lib 1-rc2 through 1-rc5 allow attackers to execute arbitrary code via (1) long VideoCD vcd:// MRLs or (2) long subtitle lines.
Affected Software
10 affected components
xine xine=0.9.18
xine Xine-lib=1_rc3
xine xine=1_rc4
xine Xine-lib=1_rc5
xine xine=1_rc2
xine Xine-lib=1_rc2
xine xine=1_rc5
xine Xine-lib=0.99
xine xine=1_rc3
xine Xine-lib=1_rc4
Remediation
Patch Available
Patch Available
Patch Available
Event History
Dec 31, 2004
CVE Published
05:00 AM
Feb 13, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-1475?
CVE-2004-1475 is classified as a high severity vulnerability due to the potential for arbitrary code execution.
2
How do I fix CVE-2004-1475?
To fix CVE-2004-1475, upgrade xine and xine-lib to versions 0.99 or later.
3
What types of attacks can exploit CVE-2004-1475?
CVE-2004-1475 can be exploited through crafted VideoCD MRLs or long subtitle lines.
4
Which versions of xine are affected by CVE-2004-1475?
CVE-2004-1475 affects xine versions 1-rc2 through 1-rc5 and 0.9.18.
5
What are the potential consequences of CVE-2004-1475?
The consequences of CVE-2004-1475 include the possibility of remote attackers executing arbitrary code on a vulnerable system.