CVEvulnerability

CVE-2004-1379

7.5 HIGH Published 2004-09-16 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2004-09-16
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Heap-based buffer overflow in the DVD subpicture decoder in xine xine-lib 1-rc5 and earlier allows remote attackers to execute arbitrary code via a (1) DVD or (2) MPEG subpicture header where the second field reuses RLE data from the end of the first field.

Affected configurations

• xine xine 1 alpha • xine xine 1 beta1 • xine xine 1 beta2 • xine xine 1 beta3 • xine xine 1 beta4 • xine xine 1 beta5 • xine xine 1 beta6 • xine xine 1 beta7 • xine xine 1 beta8 • xine xine 1 beta9 • xine xine 1 beta10 • xine xine 1 beta11 • xine xine 1 beta12 • xine xine 1 rc0 • xine xine 1 rc0a • xine xine 1 rc1 • xine xine 1 rc2 • xine xine 1 rc3 • xine xine 1 rc3a • xine xine 1 rc3b • xine xine 1 rc4 • xine xine 1 rc5 • xine xine-lib 0.9.8 • xine xine-lib 1 beta2 • xine xine-lib 1 beta3 • xine xine-lib 1 beta4 • xine xine-lib 1 beta5 • xine xine-lib 1 beta6 • xine xine-lib 1 beta7 • xine xine-lib 1 beta8 • xine xine-lib 1 beta9 • xine xine-lib 1 beta12 • xine xine-lib 1 rc0 • xine xine-lib 1 rc1 • xine xine-lib 1 rc2 • xine xine-lib 1 rc3 • xine xine-lib 1 rc3a • xine xine-lib 1 rc3b • xine xine-lib 1 rc3c • xine xine-lib 1 rc4 • xine xine-lib 1 rc5

References