Vulnerability in Mandrakesoft Mandrake Linux
CVE-2004-1187
Heap-based buffer overflow in the pnm_get_chunk function for xine 0.99.2, and other packages such as MPlayer that use the same code, allows remote attackers to execute arbitrary code via long PNA_TAG values, a different vulnerability than CVE-2004-1188.
EPSS: 0.052 (91.6th percentile) — read the EPSS interpretation.
Affected products
- Mandrakesoft Mandrake_linux — versions 10.0, 10.1
- Mplayer — versions 0.90, 0.90_pre, 0.90_rc
- Xine — versions 0.9.8, 0.9.13, 0.9.18
- Xine Xine-lib — versions 0.9.8, 0.9.13, 0.99
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (x_refsource_IDEFENSE, Patch, Vendor Advisory, third-party-advisory)
- cve@mitre.org (vendor-advisory, x_refsource_MANDRAKE)
- cve@mitre.org (x_refsource_CONFIRM)