PT-2004-1570 · Mplayer+1 · Mplayer+1

Publicado 2004-05-05 · Atualizado 2017-07-11 · CVE-2004-0433

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions MPlayer versions prior to 1.0pre4 xine lib (xine-lib) versions prior to 1-rc4

Description The issue is related to multiple buffer overflows in the Real-Time Streaming Protocol (RTSP) client. This can be triggered when playing Real RTSP streams, allowing remote attackers to cause a denial of service or possibly execute arbitrary code. The overflows can occur due to long URLs, long Real server responses, or long Real Data Transport (RDT) packets.

Recommendations For MPlayer versions prior to 1.0pre4, update to version 1.0pre4 or later to resolve the issue. For xine lib (xine-lib) versions prior to 1-rc4, update to version 1-rc4 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2004-0433

Produtos afetados

Mplayer

Xine-Lib

Referências · 7

• https://osv.dev/vulnerability/DEBIAN-CVE-2004-0433 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16019 · Nota
• http://xinehq.de/index.php/security/XSA-2004-3 · Nota
• https://osv.dev/vulnerability/CVE-2004-0433 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2004-0433 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2004-0433 · Nota de Segurança
• http://security.gentoo.org/glsa/glsa-200405-24.xml · Aviso do Fabricante