Lucene search

MitreCVE-2004-0433

HistoryAug 18, 2004 - 4:00 a.m.

CVE-2004-0433

2004-08-1804:00:00

mitre

web.nvd.nist.gov

cve-2004-0433

rtsp

buffer overflow

mplayer

xine lib

denial of service

remote code execution

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.081

Percentile

94.3%

JSON

Multiple buffer overflows in the Real-Time Streaming Protocol (RTSP) client for (1) MPlayer before 1.0pre4 and (2) xine lib (xine-lib) before 1-rc4, when playing Real RTSP (realrtsp) streams, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (a) long URLs, (b) long Real server responses, or © long Real Data Transport (RDT) packets.

Affected configurations

Nvd

Node

mplayermplayerMatch1.0_pre3try2

xinexine-libMatch1_beta1

xinexine-libMatch1_beta2

xinexine-libMatch1_beta3

xinexine-libMatch1_beta4

xinexine-libMatch1_beta5

xinexine-libMatch1_beta6

xinexine-libMatch1_beta7

xinexine-libMatch1_beta8

xinexine-libMatch1_beta9

xinexine-libMatch1_beta10

xinexine-libMatch1_beta11

xinexine-libMatch1_rc2

xinexine-libMatch1_rc3a

xinexine-libMatch1_rc3b

xinexine-libMatch1_rc3c

VendorProductVersionCPE
mplayermplayer1.0_pre3try2cpe:2.3:a:mplayer:mplayer:1.0_pre3try2:*:*:*:*:*:*:*
xinexine-lib1_beta1cpe:2.3:a:xine:xine-lib:1_beta1:*:*:*:*:*:*:*
xinexine-lib1_beta2cpe:2.3:a:xine:xine-lib:1_beta2:*:*:*:*:*:*:*
xinexine-lib1_beta3cpe:2.3:a:xine:xine-lib:1_beta3:*:*:*:*:*:*:*
xinexine-lib1_beta4cpe:2.3:a:xine:xine-lib:1_beta4:*:*:*:*:*:*:*
xinexine-lib1_beta5cpe:2.3:a:xine:xine-lib:1_beta5:*:*:*:*:*:*:*
xinexine-lib1_beta6cpe:2.3:a:xine:xine-lib:1_beta6:*:*:*:*:*:*:*
xinexine-lib1_beta7cpe:2.3:a:xine:xine-lib:1_beta7:*:*:*:*:*:*:*
xinexine-lib1_beta8cpe:2.3:a:xine:xine-lib:1_beta8:*:*:*:*:*:*:*
xinexine-lib1_beta9cpe:2.3:a:xine:xine-lib:1_beta9:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mplayer	mplayer	1.0_pre3try2	cpe:2.3:a:mplayer:mplayer:1.0_pre3try2:::::::*
xine	xine-lib	1_beta1	cpe:2.3:a:xine:xine-lib:1_beta1:::::::*
xine	xine-lib	1_beta2	cpe:2.3:a:xine:xine-lib:1_beta2:::::::*
xine	xine-lib	1_beta3	cpe:2.3:a:xine:xine-lib:1_beta3:::::::*
xine	xine-lib	1_beta4	cpe:2.3:a:xine:xine-lib:1_beta4:::::::*
xine	xine-lib	1_beta5	cpe:2.3:a:xine:xine-lib:1_beta5:::::::*
xine	xine-lib	1_beta6	cpe:2.3:a:xine:xine-lib:1_beta6:::::::*
xine	xine-lib	1_beta7	cpe:2.3:a:xine:xine-lib:1_beta7:::::::*
xine	xine-lib	1_beta8	cpe:2.3:a:xine:xine-lib:1_beta8:::::::*
xine	xine-lib	1_beta9	cpe:2.3:a:xine:xine-lib:1_beta9:::::::*