CVE-2004-1475

2004-12-3105:00:00

[email protected]

web.nvd.nist.gov

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

Low

EPSS

0.007

Percentile

80.3%

JSON

Multiple stack-based buffer overflows in xine-lib 1-rc2 through 1-rc5 allow attackers to execute arbitrary code via (1) long VideoCD vcd:// MRLs or (2) long subtitle lines.

Affected configurations

Nvd

Node

xinexineMatch0.9.18

xinexineMatch1_rc2

xinexineMatch1_rc3

xinexineMatch1_rc4

xinexineMatch1_rc5

xinexine-libMatch0.99

xinexine-libMatch1_rc2

xinexine-libMatch1_rc3

xinexine-libMatch1_rc4

xinexine-libMatch1_rc5

VendorProductVersionCPE
xinexine0.9.18cpe:2.3:a:xine:xine:0.9.18:*:*:*:*:*:*:*
xinexine1_rc2cpe:2.3:a:xine:xine:1_rc2:*:*:*:*:*:*:*
xinexine1_rc3cpe:2.3:a:xine:xine:1_rc3:*:*:*:*:*:*:*
xinexine1_rc4cpe:2.3:a:xine:xine:1_rc4:*:*:*:*:*:*:*
xinexine1_rc5cpe:2.3:a:xine:xine:1_rc5:*:*:*:*:*:*:*
xinexine-lib0.99cpe:2.3:a:xine:xine-lib:0.99:*:*:*:*:*:*:*
xinexine-lib1_rc2cpe:2.3:a:xine:xine-lib:1_rc2:*:*:*:*:*:*:*
xinexine-lib1_rc3cpe:2.3:a:xine:xine-lib:1_rc3:*:*:*:*:*:*:*
xinexine-lib1_rc4cpe:2.3:a:xine:xine-lib:1_rc4:*:*:*:*:*:*:*
xinexine-lib1_rc5cpe:2.3:a:xine:xine-lib:1_rc5:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
xine	xine	0.9.18	cpe:2.3:a:xine:xine:0.9.18:::::::*
xine	xine	1_rc2	cpe:2.3:a:xine:xine:1_rc2:::::::*
xine	xine	1_rc3	cpe:2.3:a:xine:xine:1_rc3:::::::*
xine	xine	1_rc4	cpe:2.3:a:xine:xine:1_rc4:::::::*
xine	xine	1_rc5	cpe:2.3:a:xine:xine:1_rc5:::::::*
xine	xine-lib	0.99	cpe:2.3:a:xine:xine-lib:0.99:::::::*
xine	xine-lib	1_rc2	cpe:2.3:a:xine:xine-lib:1_rc2:::::::*
xine	xine-lib	1_rc3	cpe:2.3:a:xine:xine-lib:1_rc3:::::::*
xine	xine-lib	1_rc4	cpe:2.3:a:xine:xine-lib:1_rc4:::::::*
xine	xine-lib	1_rc5	cpe:2.3:a:xine:xine-lib:1_rc5:::::::*