Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2004-1187
HistoryJan 10, 2005 - 5:00 a.m.

CVE-2004-1187

2005-01-1005:00:00
[email protected]
web.nvd.nist.gov
1

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.041 Low

EPSS

Percentile

92.2%

JSON

Heap-based buffer overflow in the pnm_get_chunk function for xine 0.99.2, and other packages such as MPlayer that use the same code, allows remote attackers to execute arbitrary code via long PNA_TAG values, a different vulnerability than CVE-2004-1188.

Affected configurations

NVD
Node
mplayermplayerMatch0.90
OR
mplayermplayerMatch0.90_pre
OR
mplayermplayerMatch0.90_rc
OR
mplayermplayerMatch0.90_rc4
OR
mplayermplayerMatch0.91
OR
mplayermplayerMatch0.92
OR
mplayermplayerMatch0.92.1
OR
mplayermplayerMatch0.92_cvs
OR
mplayermplayerMatch1.0_pre1
OR
mplayermplayerMatch1.0_pre2
OR
mplayermplayerMatch1.0_pre3
OR
mplayermplayerMatch1.0_pre3try2
OR
mplayermplayerMatch1.0_pre4
OR
mplayermplayerMatch1.0_pre5
OR
mplayermplayerMatch1.0_pre5try1
OR
mplayermplayerMatch1.0_pre5try2
OR
mplayermplayerMatchhead_cvs
OR
xinexineMatch0.9.8
OR
xinexineMatch0.9.13
OR
xinexineMatch0.9.18
OR
xinexineMatch1_alpha
OR
xinexineMatch1_beta1
OR
xinexineMatch1_beta2
OR
xinexineMatch1_beta3
OR
xinexineMatch1_beta4
OR
xinexineMatch1_beta5
OR
xinexineMatch1_beta6
OR
xinexineMatch1_beta7
OR
xinexineMatch1_beta8
OR
xinexineMatch1_beta9
OR
xinexineMatch1_beta10
OR
xinexineMatch1_beta11
OR
xinexineMatch1_beta12
OR
xinexineMatch1_rc0
OR
xinexineMatch1_rc0a
OR
xinexineMatch1_rc1
OR
xinexineMatch1_rc2
OR
xinexineMatch1_rc3
OR
xinexineMatch1_rc3a
OR
xinexineMatch1_rc3b
OR
xinexineMatch1_rc4
OR
xinexineMatch1_rc5
OR
xinexineMatch1_rc6
OR
xinexineMatch1_rc6a
OR
xinexineMatch1_rc7
OR
xinexineMatch1_rc8
OR
xinexine-libMatch0.9.8
OR
xinexine-libMatch0.9.13
OR
xinexine-libMatch0.99
OR
xinexine-libMatch1_alpha
OR
xinexine-libMatch1_beta1
OR
xinexine-libMatch1_beta2
OR
xinexine-libMatch1_beta3
OR
xinexine-libMatch1_beta4
OR
xinexine-libMatch1_beta5
OR
xinexine-libMatch1_beta6
OR
xinexine-libMatch1_beta7
OR
xinexine-libMatch1_beta8
OR
xinexine-libMatch1_beta9
OR
xinexine-libMatch1_beta10
OR
xinexine-libMatch1_beta11
OR
xinexine-libMatch1_beta12
OR
xinexine-libMatch1_rc0
OR
xinexine-libMatch1_rc1
OR
xinexine-libMatch1_rc2
OR
xinexine-libMatch1_rc3
OR
xinexine-libMatch1_rc3a
OR
xinexine-libMatch1_rc3b
OR
xinexine-libMatch1_rc3c
OR
xinexine-libMatch1_rc4
OR
xinexine-libMatch1_rc5
OR
xinexine-libMatch1_rc6
OR
xinexine-libMatch1_rc6a
OR
xinexine-libMatch1_rc7
Node
mandrakesoftmandrake_linuxMatch10.0
OR
mandrakesoftmandrake_linuxMatch10.0amd64
OR
mandrakesoftmandrake_linuxMatch10.1
OR
mandrakesoftmandrake_linuxMatch10.1x86_64

Related

cve 2
freebsd 1
ubuntucve 2
debiancve 2
cvelist 2
nvd 1
openvas 4
nessus 3
gentoo 1
securityvulns 2
cve
cve
CVE-2004-1188
2005-01-10 05:00:00
CVE-2004-1187
2005-01-10 05:00:00
freebsd
freebsd
mplayer -- multiple vulnerabilities
2004-12-10 00:00:00
ubuntucve
ubuntucve
CVE-2004-1187
2005-01-10 00:00:00
CVE-2004-1188
2005-01-10 00:00:00
debiancve
debiancve
CVE-2004-1188
2005-01-10 05:00:00
CVE-2004-1187
2005-01-10 05:00:00
cvelist
cvelist
CVE-2004-1188
2004-12-22 05:00:00
CVE-2004-1187
2004-12-22 05:00:00
nvd
nvd
CVE-2004-1188
2005-01-10 05:00:00
openvas
openvas
mplayer -- multiple vulnerabilities
2008-09-04 00:00:00
mplayer -- multiple vulnerabilities
2008-09-04 00:00:00
Gentoo Security Advisory GLSA 200501-07 (xine-lib)
2008-09-24 00:00:00
nessus
nessus
FreeBSD : mplayer -- multiple vulnerabilities (85d76f02-5380-11d9-a9e7-0001020eed82)
2005-07-13 00:00:00
Mandrake Linux Security Advisory : xine-lib (MDKSA-2005:011)
2005-01-19 00:00:00
GLSA-200501-07 : xine-lib: Multiple overflows
2005-02-14 00:00:00
gentoo
gentoo
xine-lib: Multiple overflows
2005-01-06 00:00:00
securityvulns
securityvulns
iDEFENSE Security Advisory 12.21.04: Multiple Vendor Xine version 0.99.2 PNM Handler PNA_TAG Heap Overflow Vulnerability
2004-12-22 00:00:00
iDEFENSE Security Advisory 12.21.04: Multiple Vendor Xine version 0.99.2 PNM Handler Negative Read Length Heap Overflow Vulnerability
2004-12-22 00:00:00

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.041 Low

EPSS

Percentile

92.2%

JSON
Related for NVD:CVE-2004-1187
cve2freebsd1ubuntucve2debiancve2cvelist2nvd1openvas4nessus3gentoo1securityvulns2