CVE-2004-0433

Published: Aug 18, 2004Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Multiple buffer overflows in the Real-Time Streaming Protocol (RTSP) client for (1) MPlayer before 1.0pre4 and (2) xine lib (xine-lib) before 1-rc4, when playing Real RTSP (realrtsp) streams, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (a) long URLs, (b) long Real server responses, or (c) long Real Data Transport (RDT) packets.

Affected (16)

Products: Mplayer: Mplayer · Xine: Xine Lib

1 product

1 product

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Mplayer Mplayer	Version 1.0_pre3try2
Xine Xine Lib	Version 1_beta10
Xine Xine Lib	Version 1_beta11
Xine Xine Lib	Version 1_beta1
Xine Xine Lib	Version 1_beta2
Xine Xine Lib	Version 1_beta3
Xine Xine Lib	Version 1_beta4
Xine Xine Lib	Version 1_beta5
Xine Xine Lib	Version 1_beta6
Xine Xine Lib	Version 1_beta7
Xine Xine Lib	Version 1_beta8
Xine Xine Lib	Version 1_beta9
Xine Xine Lib	Version 1_rc2
Xine Xine Lib	Version 1_rc3a
Xine Xine Lib	Version 1_rc3b
Xine Xine Lib	Version 1_rc3c

References (6)

http://security.gentoo.org/glsa/glsa-200405-24.xml

Source: cve@mitre.org

Vendor Advisory

http://www.xinehq.de/index.php/security/XSA-2004-3

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/16019

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200405-24.xml

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.xinehq.de/index.php/security/XSA-2004-3

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/16019

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.