CVE-2004-1188 : Detail

CVE-2004-1188

0.49%V3
Network
2004-12-22
04h00 +00:00
2017-07-10
12h57 +00:00
Notifications for a CVE
Stay informed of any changes for a specific CVE.
Notifications manage

CVE Descriptions

The pnm_get_chunk function in xine 0.99.2 and earlier, and other packages such as MPlayer that use the same code, does not properly verify that the chunk size is less than the PREAMBLE_SIZE, which causes a read operation with a negative length that leads to a buffer overflow via (1) RMF_TAG, (2) DATA_TAG, (3) PROP_TAG, (4) MDPR_TAG, and (5) CONT_TAG values, a different vulnerability than CVE-2004-1187.

CVE Informations

Metrics

Metrics Score Severity CVSS Vector Source
V2 10 AV:N/AC:L/Au:N/C:C/I:C/A:C [email protected]

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

Products Mentioned

Configuraton 0

Mplayer>>Mplayer >> Version 0.90

    Mplayer>>Mplayer >> Version 0.90_pre

      Mplayer>>Mplayer >> Version 0.90_rc

        Mplayer>>Mplayer >> Version 0.90_rc4

          Mplayer>>Mplayer >> Version 0.91

            Mplayer>>Mplayer >> Version 0.92

              Mplayer>>Mplayer >> Version 0.92.1

                Mplayer>>Mplayer >> Version 0.92_cvs

                  Mplayer>>Mplayer >> Version 1.0_pre1

                    Mplayer>>Mplayer >> Version 1.0_pre2

                      Mplayer>>Mplayer >> Version 1.0_pre3

                        Mplayer>>Mplayer >> Version 1.0_pre3try2

                          Mplayer>>Mplayer >> Version 1.0_pre4

                            Mplayer>>Mplayer >> Version 1.0_pre5

                              Mplayer>>Mplayer >> Version 1.0_pre5try1

                                Mplayer>>Mplayer >> Version 1.0_pre5try2

                                  Mplayer>>Mplayer >> Version head_cvs

                                    Xine>>Xine >> Version 0.9.8

                                      Xine>>Xine >> Version 0.9.13

                                        Xine>>Xine >> Version 0.9.18

                                          Xine>>Xine >> Version 1_alpha

                                            Xine>>Xine >> Version 1_beta1

                                              Xine>>Xine >> Version 1_beta2

                                                Xine>>Xine >> Version 1_beta3

                                                  Xine>>Xine >> Version 1_beta4

                                                    Xine>>Xine >> Version 1_beta5

                                                      Xine>>Xine >> Version 1_beta6

                                                        Xine>>Xine >> Version 1_beta7

                                                          Xine>>Xine >> Version 1_beta8

                                                            Xine>>Xine >> Version 1_beta9

                                                              Xine>>Xine >> Version 1_beta10

                                                                Xine>>Xine >> Version 1_beta11

                                                                  Xine>>Xine >> Version 1_beta12

                                                                    Xine>>Xine >> Version 1_rc0

                                                                      Xine>>Xine >> Version 1_rc0a

                                                                        Xine>>Xine >> Version 1_rc1

                                                                          Xine>>Xine >> Version 1_rc2

                                                                            Xine>>Xine >> Version 1_rc3

                                                                              Xine>>Xine >> Version 1_rc3a

                                                                                Xine>>Xine >> Version 1_rc3b

                                                                                  Xine>>Xine >> Version 1_rc4

                                                                                    Xine>>Xine >> Version 1_rc5

                                                                                      Xine>>Xine >> Version 1_rc6

                                                                                        Xine>>Xine >> Version 1_rc6a

                                                                                          Xine>>Xine >> Version 1_rc7

                                                                                            Xine>>Xine >> Version 1_rc8

                                                                                              Xine>>Xine-lib >> Version 0.9.8

                                                                                                Xine>>Xine-lib >> Version 0.9.13

                                                                                                  Xine>>Xine-lib >> Version 0.99

                                                                                                    Xine>>Xine-lib >> Version 1_alpha

                                                                                                      Xine>>Xine-lib >> Version 1_beta1

                                                                                                        Xine>>Xine-lib >> Version 1_beta2

                                                                                                          Xine>>Xine-lib >> Version 1_beta3

                                                                                                            Xine>>Xine-lib >> Version 1_beta4

                                                                                                              Xine>>Xine-lib >> Version 1_beta5

                                                                                                                Xine>>Xine-lib >> Version 1_beta6

                                                                                                                  Xine>>Xine-lib >> Version 1_beta7

                                                                                                                    Xine>>Xine-lib >> Version 1_beta8

                                                                                                                      Xine>>Xine-lib >> Version 1_beta9

                                                                                                                        Xine>>Xine-lib >> Version 1_beta10

                                                                                                                          Xine>>Xine-lib >> Version 1_beta11

                                                                                                                            Xine>>Xine-lib >> Version 1_beta12

                                                                                                                              Xine>>Xine-lib >> Version 1_rc0

                                                                                                                                Xine>>Xine-lib >> Version 1_rc1

                                                                                                                                  Xine>>Xine-lib >> Version 1_rc2

                                                                                                                                    Xine>>Xine-lib >> Version 1_rc3

                                                                                                                                      Xine>>Xine-lib >> Version 1_rc3a

                                                                                                                                        Xine>>Xine-lib >> Version 1_rc3b

                                                                                                                                          Xine>>Xine-lib >> Version 1_rc3c

                                                                                                                                            Xine>>Xine-lib >> Version 1_rc4

                                                                                                                                              Xine>>Xine-lib >> Version 1_rc5

                                                                                                                                                Xine>>Xine-lib >> Version 1_rc6

                                                                                                                                                  Xine>>Xine-lib >> Version 1_rc6a

                                                                                                                                                    Xine>>Xine-lib >> Version 1_rc7

                                                                                                                                                      Configuraton 0

                                                                                                                                                      Mandrakesoft>>Mandrake_linux >> Version 10.0

                                                                                                                                                      Mandrakesoft>>Mandrake_linux >> Version 10.0

                                                                                                                                                        Mandrakesoft>>Mandrake_linux >> Version 10.1

                                                                                                                                                        Mandrakesoft>>Mandrake_linux >> Version 10.1

                                                                                                                                                          References

                                                                                                                                                          http://www.mandriva.com/security/advisories?name=MDKSA-2005:011
                                                                                                                                                          Tags : vendor-advisory, x_refsource_MANDRAKE