CVE-2004-1187

Heap-based buffer overflow in the pnm_get_chunk function for xine 0.99.2, and other packages such as MPlayer that use the same code, allows remote attackers to execute arbitrary code via long PNA_TAG values, a different vulnerability than CVE-2004-1188.

• mplayer mplayer 0.90 • mplayer mplayer 0.90 pre • mplayer mplayer 0.90 rc • mplayer mplayer 0.90 rc4 • mplayer mplayer 0.91 • mplayer mplayer 0.92 • mplayer mplayer 0.92.1 • mplayer mplayer 0.92 cvs • mplayer mplayer 1.0 pre1 • mplayer mplayer 1.0 pre2 • mplayer mplayer 1.0 pre3 • mplayer mplayer 1.0 pre3try2 • mplayer mplayer 1.0 pre4 • mplayer mplayer 1.0 pre5 • mplayer mplayer 1.0 pre5try1 • mplayer mplayer 1.0 pre5try2 • mplayer mplayer head cvs • xine xine 0.9.8 • xine xine 0.9.13 • xine xine 0.9.18 • xine xine 1 alpha • xine xine 1 beta1 • xine xine 1 beta2 • xine xine 1 beta3 • xine xine 1 beta4 • xine xine 1 beta5 • xine xine 1 beta6 • xine xine 1 beta7 • xine xine 1 beta8 • xine xine 1 beta9 • xine xine 1 beta10 • xine xine 1 beta11 • xine xine 1 beta12 • xine xine 1 rc0 • xine xine 1 rc0a • xine xine 1 rc1 • xine xine 1 rc2 • xine xine 1 rc3 • xine xine 1 rc3a • xine xine 1 rc3b • xine xine 1 rc4 • xine xine 1 rc5 • xine xine 1 rc6 • xine xine 1 rc6a • xine xine 1 rc7 • xine xine 1 rc8 • xine xine-lib 0.9.8 • xine xine-lib 0.9.13 • xine xine-lib 0.99 • xine xine-lib 1 alpha • xine xine-lib 1 beta1 • xine xine-lib 1 beta2 • xine xine-lib 1 beta3 • xine xine-lib 1 beta4 • xine xine-lib 1 beta5 • xine xine-lib 1 beta6 • xine xine-lib 1 beta7 • xine xine-lib 1 beta8 • xine xine-lib 1 beta9 • xine xine-lib 1 beta10 … and 16 more