CVE-2004-1187

No fix known EPSS 5%

Heap-based buffer overflow in the pnm_get_chunk function for xine 0.99.2, and other packages such as MPlayer that use the same code, allows remote attackers to execute arbitrary code via long PNA_TAG values, a different vulnerability than CVE-2004-1188.

Published 2004-12-22 · CVE record · OSV

Products: mplayer, xine, xine-lib, mandrakesoft mandrake_linux