CVEvulnerability
CVE-2004-1455
5.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2004-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.1 MEDIUM — AV:N/AC:H/Au:N/C:P/I:P/A:P
Description
Stack-based buffer overflow in Xine-lib-rc5 in xine-lib 1_rc5-r2 and earlier allows remote attackers to execute arbitrary code via crafted playlists that result in a long vcd:// URL.
Affected configurations
• xine xine-lib 1 beta1
• xine xine-lib 1 beta2
• xine xine-lib 1 beta3
• xine xine-lib 1 beta4
• xine xine-lib 1 beta5
• xine xine-lib 1 beta6
• xine xine-lib 1 beta7
• xine xine-lib 1 beta8
• xine xine-lib 1 beta9
• xine xine-lib 1 beta10
• xine xine-lib 1 beta11
• xine xine-lib 1 rc2
• xine xine-lib 1 rc3a
• xine xine-lib 1 rc3b
• xine xine-lib 1 rc3c
• xine xine-lib 1 rc4
• xine xine-lib 1 rc5
• xine xine-lib 1 rc5 r2
References
- http://marc.info/?l=bugtraq&m=109284737628045&w=2 marc.info
- http://open-security.org/advisories/6 open-security.org
- http://secunia.com/advisories/12194/ secunia.com
- http://www.gentoo.org/security/en/glsa/glsa-200408-18.xml Patch
- http://www.securityfocus.com/bid/10890 Exploit, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16930 exchange.xforce.ibmcloud.com
- http://marc.info/?l=bugtraq&m=109284737628045&w=2 marc.info
- http://open-security.org/advisories/6 open-security.org
- http://secunia.com/advisories/12194/ secunia.com
- http://www.gentoo.org/security/en/glsa/glsa-200408-18.xml Patch
- http://www.securityfocus.com/bid/10890 Exploit, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16930 exchange.xforce.ibmcloud.com