Login Request a demo
Unscored severity · published Dec 31, 2004
CVE-2004-1455
Stack-based buffer overflow in Xine-lib-rc5 in xine-lib 1_rc5-r2 and earlier allows remote attackers to execute arbitrary code via crafted playlists that result in a long vcd://…
–
CVSS
4.2%
EPSS
No
On KEV
Description
Stack-based buffer overflow in Xine-lib-rc5 in xine-lib 1_rc5-r2 and earlier allows remote attackers to execute arbitrary code via crafted playlists that result in a long vcd:// URL.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.2% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
XI
Xine-lib · Xine
1_beta1; 1_beta2; 1_beta3; 1_beta4; 1_beta5; 1_beta6; +12 more · source: NVD
Affected product
XI
Xine-lib
Xine
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-1455
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-1455
marc.info
http://marc.info/?l=bugtraq&m=109284737628045&w=2
open-security.org
http://open-security.org/advisories/6
secunia.com
http://secunia.com/advisories/12194/
Patch
http://www.gentoo.org/security/en/glsa/glsa-200408-18.xml
Exploit
http://www.securityfocus.com/bid/10890
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/16930
More from Xine-lib
–
CVE-2009-1274
Integer overflow in the qt_error parse_trak_atom function in demuxers/demux_qt.c in xine-lib 1.1.16.2 and earlier allows remote attackers to execute arbitrary code via a Quicktime…
–
CVE-2009-0698
Integer overflow in the 4xm demuxer (demuxers/demux_4xm.c) in xine-lib 1.1.16.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code…
–
CVE-2008-5248
xine-lib before 1.1.15 allows remote attackers to cause a denial of service (crash) via "MP3 files with metadata consisting only of separators."
–
CVE-2008-5247
The real_parse_audio_specific_data function in demux_real.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, uses an untrusted height (aka codec_data_length) value as a…
–
CVE-2008-5246
Multiple heap-based buffer overflows in xine-lib before 1.1.15 allow remote attackers to execute arbitrary code via vectors that send ID3 data to the (1) id3v22_interp_frame and…