Vulnerability in Xine

CVE-2004-1476

Stack-based buffer overflow in the VideoCD (VCD) code in xine-lib 1-rc2 through 1-rc5, as derived from libcdio, allows attackers to execute arbitrary code via a VideoCD with an unterminated disk label.

EPSS: 0.023 (81.5th percentile) — read the EPSS interpretation.

Affected products

Xine — versions 0.9.18, 1_rc2, 1_rc3
Xine Xine-lib — versions 0.99, 1_rc2, 1_rc3
Suse Suse_linux — versions 8.0, 8.1, 8.2
N/a — versions n/a

References

cve@mitre.org (Patch, vdb-entry, x_refsource_BID)
cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ, Patch)
cve@mitre.org (vendor-advisory, Patch, x_refsource_GENTOO, Vendor Advisory)
cve@mitre.org (vdb-entry, x_refsource_XF)