CVE-2005-1195: Buffer Overflow
Published Apr 21, 2005
·Updated
Multiple heap-based buffer overflows in the code used to handle (1) MMS over TCP (MMST) streams or (2) RealMedia RTSP streams in xine-lib before 1.0, and other products that use xine-lib such as MPlayer 1.0pre6 and earlier, allow remote malicious servers to execute arbitrary code.
Affected Software
16 affected components
MPlayer MPlayer<=1.0_pre6
xine Xine-lib=1_beta7
xine Xine-lib=1_beta9
xine Xine-lib=1_rc3b
xine Xine-lib=1_beta4
xine Xine-lib=1_rc3c
xine Xine-lib=1_rc2
xine Xine-lib=1_beta2
xine Xine-lib=1_beta5
xine Xine-lib=1_beta11
xine Xine-lib=1_beta6
xine Xine-lib=1_rc3a
xine Xine-lib=1_beta1
xine Xine-lib=1_beta10
xine Xine-lib=1_beta8
xine Xine-lib=1_beta3
Remediation
Patch Available
Patch Available
Patch Available
Event History
Apr 21, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-1195?
CVE-2005-1195 has a high severity rating due to the potential for remote code execution.
2
How do I fix CVE-2005-1195?
To fix CVE-2005-1195, users should update xine-lib to version 1.0 or later.
3
What software is affected by CVE-2005-1195?
CVE-2005-1195 affects xine-lib versions prior to 1.0 and MPlayer version 1.0pre6 and earlier.
4
Can CVE-2005-1195 be exploited remotely?
Yes, CVE-2005-1195 can be exploited remotely by malicious servers sending specially crafted streams.
5
What types of streams are involved in CVE-2005-1195 vulnerability?
CVE-2005-1195 involves vulnerabilities in handling MMS over TCP and RealMedia RTSP streams.