← Database

CVE-2004-1187

CRITICAL CVSS: 10.0 Published: 2005-01-10 Modified: 2026-06-16

Description

Heap-based buffer overflow in the pnm_get_chunk function for xine 0.99.2, and other packages such as MPlayer that use the same code, allows remote attackers to execute arbitrary code via long PNA_TAG values, a different vulnerability than CVE-2004-1188.

Affected Platforms

Xine Xine-LibMandrakesoft Mandrake LinuxMplayer MplayerXine Xine

Weakness Type

NVD-CWE-Other

References