CVE-2004-1379
Fixed in a distro release EPSS 4%
Heap-based buffer overflow in the DVD subpicture decoder in xine xine-lib 1-rc5 and earlier allows remote attackers to execute arbitrary code via a (1) DVD or (2) MPEG subpicture header where the second field reuses RLE data from the end of the first field.
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 3.0 | xine-lib | 0.9.8-2woody2 |