CVE-2004-0433

2004-08-1804:00:00

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.081

Percentile

94.3%

JSON

Multiple buffer overflows in the Real-Time Streaming Protocol (RTSP) client for (1) MPlayer before 1.0pre4 and (2) xine lib (xine-lib) before 1-rc4, when playing Real RTSP (realrtsp) streams, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (a) long URLs, (b) long Real server responses, or © long Real Data Transport (RDT) packets.

Affected configurations

Nvd

Node

mplayermplayerMatch1.0_pre3try2

xinexine-libMatch1_beta1

xinexine-libMatch1_beta2

xinexine-libMatch1_beta3

xinexine-libMatch1_beta4

xinexine-libMatch1_beta5

xinexine-libMatch1_beta6

xinexine-libMatch1_beta7

xinexine-libMatch1_beta8

xinexine-libMatch1_beta9

xinexine-libMatch1_beta10

xinexine-libMatch1_beta11

xinexine-libMatch1_rc2

xinexine-libMatch1_rc3a

xinexine-libMatch1_rc3b

xinexine-libMatch1_rc3c

VendorProductVersionCPE
mplayermplayer1.0_pre3try2cpe:2.3:a:mplayer:mplayer:1.0_pre3try2:*:*:*:*:*:*:*
xinexine-lib1_beta1cpe:2.3:a:xine:xine-lib:1_beta1:*:*:*:*:*:*:*
xinexine-lib1_beta2cpe:2.3:a:xine:xine-lib:1_beta2:*:*:*:*:*:*:*
xinexine-lib1_beta3cpe:2.3:a:xine:xine-lib:1_beta3:*:*:*:*:*:*:*
xinexine-lib1_beta4cpe:2.3:a:xine:xine-lib:1_beta4:*:*:*:*:*:*:*
xinexine-lib1_beta5cpe:2.3:a:xine:xine-lib:1_beta5:*:*:*:*:*:*:*
xinexine-lib1_beta6cpe:2.3:a:xine:xine-lib:1_beta6:*:*:*:*:*:*:*
xinexine-lib1_beta7cpe:2.3:a:xine:xine-lib:1_beta7:*:*:*:*:*:*:*
xinexine-lib1_beta8cpe:2.3:a:xine:xine-lib:1_beta8:*:*:*:*:*:*:*
xinexine-lib1_beta9cpe:2.3:a:xine:xine-lib:1_beta9:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mplayer	mplayer	1.0_pre3try2	cpe:2.3:a:mplayer:mplayer:1.0_pre3try2:::::::*
xine	xine-lib	1_beta1	cpe:2.3:a:xine:xine-lib:1_beta1:::::::*
xine	xine-lib	1_beta2	cpe:2.3:a:xine:xine-lib:1_beta2:::::::*
xine	xine-lib	1_beta3	cpe:2.3:a:xine:xine-lib:1_beta3:::::::*
xine	xine-lib	1_beta4	cpe:2.3:a:xine:xine-lib:1_beta4:::::::*
xine	xine-lib	1_beta5	cpe:2.3:a:xine:xine-lib:1_beta5:::::::*
xine	xine-lib	1_beta6	cpe:2.3:a:xine:xine-lib:1_beta6:::::::*
xine	xine-lib	1_beta7	cpe:2.3:a:xine:xine-lib:1_beta7:::::::*
xine	xine-lib	1_beta8	cpe:2.3:a:xine:xine-lib:1_beta8:::::::*
xine	xine-lib	1_beta9	cpe:2.3:a:xine:xine-lib:1_beta9:::::::*