PT-2004-1570 · Mplayer+1 · Mplayer+1

Published 2004-05-05 · Updated 2017-07-11 · CVE-2004-0433

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions MPlayer versions prior to 1.0pre4 xine lib (xine-lib) versions prior to 1-rc4

Description The issue is related to multiple buffer overflows in the Real-Time Streaming Protocol (RTSP) client. This can be triggered when playing Real RTSP streams, allowing remote attackers to cause a denial of service or possibly execute arbitrary code. The overflows can occur due to long URLs, long Real server responses, or long Real Data Transport (RDT) packets.

Recommendations For MPlayer versions prior to 1.0pre4, update to version 1.0pre4 or later to resolve the issue. For xine lib (xine-lib) versions prior to 1-rc4, update to version 1-rc4 or later to resolve the issue.

Fix

Related Identifiers

CVE-2004-0433

Affected Products

Mplayer

Xine-Lib

References · 7

• https://osv.dev/vulnerability/DEBIAN-CVE-2004-0433 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2004-0433 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2004-0433 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0433 · Security Note
• http://security.gentoo.org/glsa/glsa-200405-24.xml · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16019 · Note
• http://xinehq.de/index.php/security/XSA-2004-3 · Note