CVE-2004-1187

Published: Jan 10, 2005Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Heap-based buffer overflow in the pnm_get_chunk function for xine 0.99.2, and other packages such as MPlayer that use the same code, allows remote attackers to execute arbitrary code via long PNA_TAG values, a different vulnerability than CVE-2004-1188.

Affected (78)

Products: Mplayer: Mplayer · Xine: Xine, Xine Lib · Mandrakesoft: Mandrake Linux

1 product

2 products

1 product

Configuration A

74 vulnerable

Vulnerable Software	Affected Versions
Mplayer Mplayer	Version 0.90
Mplayer Mplayer	Version 0.90_pre
Mplayer Mplayer	Version 0.90_rc4
Mplayer Mplayer	Version 0.90_rc
Mplayer Mplayer	Version 0.91
Mplayer Mplayer	Version 0.92.1
Mplayer Mplayer	Version 0.92
Mplayer Mplayer	Version 0.92_cvs
Mplayer Mplayer	Version 1.0_pre1
Mplayer Mplayer	Version 1.0_pre2
Mplayer Mplayer	Version 1.0_pre3
Mplayer Mplayer	Version 1.0_pre3try2
Mplayer Mplayer	Version 1.0_pre4
Mplayer Mplayer	Version 1.0_pre5
Mplayer Mplayer	Version 1.0_pre5try1
Mplayer Mplayer	Version 1.0_pre5try2
Mplayer Mplayer	Version head_cvs
Xine Xine	Version 0.9.13
Xine Xine	Version 0.9.18
Xine Xine	Version 0.9.8
Xine Xine	Version 1_alpha
Xine Xine	Version 1_beta10
Xine Xine	Version 1_beta11
Xine Xine	Version 1_beta12
Xine Xine	Version 1_beta1
Xine Xine	Version 1_beta2
Xine Xine	Version 1_beta3
Xine Xine	Version 1_beta4
Xine Xine	Version 1_beta5
Xine Xine	Version 1_beta6
Xine Xine	Version 1_beta7
Xine Xine	Version 1_beta8
Xine Xine	Version 1_beta9
Xine Xine	Version 1_rc0
Xine Xine	Version 1_rc0a
Xine Xine	Version 1_rc1
Xine Xine	Version 1_rc2
Xine Xine	Version 1_rc3
Xine Xine	Version 1_rc3a
Xine Xine	Version 1_rc3b
Xine Xine	Version 1_rc4
Xine Xine	Version 1_rc5
Xine Xine	Version 1_rc6
Xine Xine	Version 1_rc6a
Xine Xine	Version 1_rc7
Xine Xine	Version 1_rc8
Xine Xine Lib	Version 0.9.13
Xine Xine Lib	Version 0.9.8
Xine Xine Lib	Version 0.99
Xine Xine Lib	Version 1_alpha
Xine Xine Lib	Version 1_beta10
Xine Xine Lib	Version 1_beta11
Xine Xine Lib	Version 1_beta12
Xine Xine Lib	Version 1_beta1
Xine Xine Lib	Version 1_beta2
Xine Xine Lib	Version 1_beta3
Xine Xine Lib	Version 1_beta4
Xine Xine Lib	Version 1_beta5
Xine Xine Lib	Version 1_beta6
Xine Xine Lib	Version 1_beta7
Xine Xine Lib	Version 1_beta8
Xine Xine Lib	Version 1_beta9
Xine Xine Lib	Version 1_rc0
Xine Xine Lib	Version 1_rc1
Xine Xine Lib	Version 1_rc2
Xine Xine Lib	Version 1_rc3
Xine Xine Lib	Version 1_rc3a
Xine Xine Lib	Version 1_rc3b
Xine Xine Lib	Version 1_rc3c
Xine Xine Lib	Version 1_rc4
Xine Xine Lib	Version 1_rc5
Xine Xine Lib	Version 1_rc6
Xine Xine Lib	Version 1_rc6a
Xine Xine Lib	Version 1_rc7

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Mandrakesoft Mandrake Linux	Version 10.0
Mandrakesoft Mandrake Linux	Version 10.0
Mandrakesoft Mandrake Linux	Version 10.1
Mandrakesoft Mandrake Linux	Version 10.1