CVE-2004-1476

Published: Dec 31, 2004Modified: Apr 16, 2026

5.1

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability: 4.9 / Impact: 6.4

Source: NVD

Description

Stack-based buffer overflow in the VideoCD (VCD) code in xine-lib 1-rc2 through 1-rc5, as derived from libcdio, allows attackers to execute arbitrary code via a VideoCD with an unterminated disk label.

Affected (17)

Products: Xine: Xine, Xine Lib · Suse: Suse Linux

2 products

1 product

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Xine Xine	Version 0.9.18
Xine Xine	Version 1_rc2
Xine Xine	Version 1_rc3
Xine Xine	Version 1_rc4
Xine Xine	Version 1_rc5
Xine Xine Lib	Version 0.99
Xine Xine Lib	Version 1_rc2
Xine Xine Lib	Version 1_rc3
Xine Xine Lib	Version 1_rc4
Xine Xine Lib	Version 1_rc5

Configuration B

7 vulnerable

Vulnerable Software	Affected Versions
Suse Suse Linux	Version 8.0
Suse Suse Linux	Version 8.1
Suse Suse Linux	Version 8.2
Suse Suse Linux	Version 9.0
Suse Suse Linux	Version 9.0
Suse Suse Linux	Version 9.1
Suse Suse Linux	Version 9.2