CVE-2004-1187

🗓️ 22 Dec 2004 05:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 50 Views

Heap-based buffer overflow in pnm_get_chunk function allows remote code execution in xine 0.99.2 and MPlayer

Reporter	Title	Published	Views	Family All 16
FreeBSD	mplayer -- multiple vulnerabilities	10 Dec 200400:00	–	freebsd
Cvelist	CVE-2004-1187	22 Dec 200405:00	–	cvelist
Debian CVE	CVE-2004-1187	22 Dec 200405:00	–	debiancve
EUVD	EUVD-2004-1184	7 Oct 202500:30	–	euvd
Tenable Nessus	FreeBSD : mplayer -- multiple vulnerabilities (85d76f02-5380-11d9-a9e7-0001020eed82)	13 Jul 200500:00	–	nessus
Tenable Nessus	GLSA-200501-07 : xine-lib: Multiple overflows	14 Feb 200500:00	–	nessus
Tenable Nessus	Mandrake Linux Security Advisory : xine-lib (MDKSA-2005:011)	19 Jan 200500:00	–	nessus
Gentoo Linux	xine-lib: Multiple overflows	6 Jan 200500:00	–	gentoo
NVD	CVE-2004-1187	10 Jan 200505:00	–	nvd
OpenVAS	mplayer -- multiple vulnerabilities	4 Sep 200800:00	–	openvas

NVD

Node

mplayer mplayerMatch0.90

OR

mplayer mplayerMatch0.90_pre

OR

mplayer mplayerMatch0.90_rc

OR

mplayer mplayerMatch0.90_rc4

OR

mplayer mplayerMatch0.91

OR

mplayer mplayerMatch0.92

OR

mplayer mplayerMatch0.92.1

OR

mplayer mplayerMatch0.92_cvs

OR

mplayer mplayerMatch1.0_pre1

OR

mplayer mplayerMatch1.0_pre2

OR

mplayer mplayerMatch1.0_pre3

OR

mplayer mplayerMatch1.0_pre3try2

OR

mplayer mplayerMatch1.0_pre4

OR

mplayer mplayerMatch1.0_pre5

OR

mplayer mplayerMatch1.0_pre5try1

OR

mplayer mplayerMatch1.0_pre5try2

OR

mplayer mplayerMatchhead_cvs

OR

xine xineMatch0.9.8

OR

xine xineMatch0.9.13

OR

xine xineMatch0.9.18

OR

xine xineMatch1_alpha

OR

xine xineMatch1_beta1

OR

xine xineMatch1_beta2

OR

xine xineMatch1_beta3

OR

xine xineMatch1_beta4

OR

xine xineMatch1_beta5

OR

xine xineMatch1_beta6

OR

xine xineMatch1_beta7

OR

xine xineMatch1_beta8

OR

xine xineMatch1_beta9

OR

xine xineMatch1_beta10

OR

xine xineMatch1_beta11

OR

xine xineMatch1_beta12

OR

xine xineMatch1_rc0

OR

xine xineMatch1_rc0a

OR

xine xineMatch1_rc1

OR

xine xineMatch1_rc2

OR

xine xineMatch1_rc3

OR

xine xineMatch1_rc3a

OR

xine xineMatch1_rc3b

OR

xine xineMatch1_rc4

OR

xine xineMatch1_rc5

OR

xine xineMatch1_rc6

OR

xine xineMatch1_rc6a

OR

xine xineMatch1_rc7

OR

xine xineMatch1_rc8

OR

xine xine-libMatch0.9.8

OR

xine xine-libMatch0.9.13

OR

xine xine-libMatch0.99

OR

xine xine-libMatch1_alpha

OR

xine xine-libMatch1_beta1

OR

xine xine-libMatch1_beta2

OR

xine xine-libMatch1_beta3

OR

xine xine-libMatch1_beta4

OR

xine xine-libMatch1_beta5

OR

xine xine-libMatch1_beta6

OR

xine xine-libMatch1_beta7

OR

xine xine-libMatch1_beta8

OR

xine xine-libMatch1_beta9

OR

xine xine-libMatch1_beta10

OR

xine xine-libMatch1_beta11

OR

xine xine-libMatch1_beta12

OR

xine xine-libMatch1_rc0

OR

xine xine-libMatch1_rc1

OR

xine xine-libMatch1_rc2

OR

xine xine-libMatch1_rc3

OR

xine xine-libMatch1_rc3a

OR

xine xine-libMatch1_rc3b

OR

xine xine-libMatch1_rc3c

OR

xine xine-libMatch1_rc4

OR

xine xine-libMatch1_rc5

OR

xine xine-libMatch1_rc6

OR

xine xine-libMatch1_rc6a

OR

xine xine-libMatch1_rc7

Node

mandrakesoft mandrake_linuxMatch10.0

OR

mandrakesoft mandrake_linuxMatch10.0amd64

OR

mandrakesoft mandrake_linuxMatch10.1

OR

mandrakesoft mandrake_linuxMatch10.1x86_64

Source	Link
mplayerhq	www.mplayerhq.hu/MPlayer/patches/pnm_fix_20041215.diff
idefense	www.idefense.com/application/poi/display
mandriva	www.mandriva.com/security/advisories
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/18640
cvs	www.cvs.sourceforge.net/viewcvs.py/xine/xine-lib/src/input/pnm.c

16 Apr 2026 00:27Current

7.8High risk

Vulners AI Score7.8

CVSS 210

EPSS0.05704

cve-2004-1187 heap-based buffer overflow pnm_get_chunk xine mplayer remote code execution