CVE-2004-0372

Published: Apr 15, 2004Modified: Apr 16, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

xine allows local users to overwrite arbitrary files via a symlink attack on a bug report email that is generated by the (1) xine-bugreport or (2) xine-check scripts.

Affected (19)

Products: Xine: Xine

Xine

1 product

Xine

Configuration A

19 vulnerable

Vulnerable Software	Affected Versions
Xine Xine	Version 0.9.13
Xine Xine	Version 1_beta10
Xine Xine	Version 1_beta11
Xine Xine	Version 1_beta12
Xine Xine	Version 1_beta1
Xine Xine	Version 1_beta2
Xine Xine	Version 1_beta3
Xine Xine	Version 1_beta4
Xine Xine	Version 1_beta5
Xine Xine	Version 1_beta6
Xine Xine	Version 1_beta7
Xine Xine	Version 1_beta8
Xine Xine	Version 1_beta9
Xine Xine	Version 1_rc0a
Xine Xine	Version 1_rc1
Xine Xine	Version 1_rc2
Xine Xine	Version 1_rc3
Xine Xine	Version 1_rc3a
Xine Xine	Version 1_rc3b