CVE-2004-1187

2005-01-1000:00:00

ubuntu.com

0.04 Low

EPSS

Percentile

92.0%

JSON

Heap-based buffer overflow in the pnm_get_chunk function for xine 0.99.2,
and other packages such as MPlayer that use the same code, allows remote
attackers to execute arbitrary code via long PNA_TAG values, a different
vulnerability than CVE-2004-1188.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchxine-lib< 1.1.1+ubuntu2-7.7UNKNOWN
ubuntu6.10noarchxine-lib< 1.1.2+repacked1-0ubuntu3.4UNKNOWN
ubuntu7.04noarchxine-lib< 1.1.4-2ubuntu3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	xine-lib	< 1.1.1+ubuntu2-7.7	UNKNOWN
ubuntu	6.10	noarch	xine-lib	< 1.1.2+repacked1-0ubuntu3.4	UNKNOWN
ubuntu	7.04	noarch	xine-lib	< 1.1.4-2ubuntu3	UNKNOWN