CVE-2004-1379 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Xine

3 documents3 sources
Severity
7.5HIGHNVD
EPSS
3.5%
top 12.31%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
XineXine Xine-lib
Timeline
PublishedSep 16
Latest updateApr 29

Description

Heap-based buffer overflow in the DVD subpicture decoder in xine xine-lib 1-rc5 and earlier allows remote attackers to execute arbitrary code via a (1) DVD or (2) MPEG subpicture header where the second field reuses RLE data from the end of the first field.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages2 packages

▶NVDxine/xine22 versions+21
▶NVDxine/xine-lib19 versions+18

Patches

Patch: slackware.com ↗Patch: www.debian.org ↗Patch: www.gentoo.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-p6pq-vqh3-43xp: Heap-based buffer overflow in the DVD subpicture decoder in xine xine-lib 1-rc5 and earlier allows remote attackers to execute arbitrary code via a (1↗2022-04-29
▶
CVEList
CVE-2004-1379: Heap-based buffer overflow in the DVD subpicture decoder in xine xine-lib 1-rc5 and earlier allows remote attackers to execute arbitrary code via a (1↗2005-01-19
▶
CVE-2004-1379 — Xine vulnerability | cvebase