Patchwire CVEs, their patch status, and feeds to follow them

CVE-2004-1476

Fixed in a distro release EPSS 2%

Stack-based buffer overflow in the VideoCD (VCD) code in xine-lib 1-rc2 through 1-rc5, as derived from libcdio, allows attackers to execute arbitrary code via a VideoCD with an unterminated disk label.

Published 2005-02-13 · CVE record · OSV

Products: xine, xine-lib, suse_linux

Distro releases

ReleasePackageFixed in
Debian 12libcdio0.69
Debian 13libcdio0.69
Debian 14libcdio0.69