10

CVE-2004-0433

Multiple buffer overflows in the Real-Time Streaming Protocol (RTSP) client for (1) MPlayer before 1.0pre4 and (2) xine lib (xine-lib) before 1-rc4, when playing Real RTSP (realrtsp) streams, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (a) long URLs, (b) long Real server responses, or (c) long Real Data Transport (RDT) packets.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mplayer ≫ Mplayer Version 1.0_pre3try2
Xine ≫ Xine-lib Version 1_beta1
Xine ≫ Xine-lib Version 1_beta2
Xine ≫ Xine-lib Version 1_beta3
Xine ≫ Xine-lib Version 1_beta4
Xine ≫ Xine-lib Version 1_beta5
Xine ≫ Xine-lib Version 1_beta6
Xine ≫ Xine-lib Version 1_beta7
Xine ≫ Xine-lib Version 1_beta8
Xine ≫ Xine-lib Version 1_beta9
Xine ≫ Xine-lib Version 1_beta10
Xine ≫ Xine-lib Version 1_beta11
Xine ≫ Xine-lib Version 1_rc2
Xine ≫ Xine-lib Version 1_rc3a
Xine ≫ Xine-lib Version 1_rc3b
Xine ≫ Xine-lib Version 1_rc3c
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 5.12% 0.913
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://security.gentoo.org/glsa/glsa-200405-24.xml
Vendor Advisory
http://www.xinehq.de/index.php/security/XSA-2004-3
https://exchange.xforce.ibmcloud.com/vulnerabilities/16019