| Package | Affected versions | Patched versions |
|---|---|---|
| mplayer | = 0.90= 0.90_pre= 0.90_rc= 0.90_rc4= 0.91= 0.92= 0.92.1= 0.92_cvs= 1.0_pre1= 1.0_pre2= 1.0_pre3= 1.0_pre3try2= 1.0_pre4= 1.0_pre5= 1.0_pre5try1= 1.0_pre5try2= head_cvs | |
| xine | = 0.9.13= 0.9.18= 0.9.8= 1_alpha= 1_beta1= 1_beta10= 1_beta11= 1_beta12= 1_beta2= 1_beta3= 1_beta4= 1_beta5= 1_beta6= 1_beta7= 1_beta8= 1_beta9= 1_rc0= 1_rc0a= 1_rc1= 1_rc2= 1_rc3= 1_rc3a= 1_rc3b= 1_rc4= 1_rc5= 1_rc6= 1_rc6a= 1_rc7= 1_rc8 | |
| xine-lib | = 0.9.13= 0.9.8= 0.99= 1_alpha= 1_beta1= 1_beta10= 1_beta11= 1_beta12= 1_beta2= 1_beta3= 1_beta4= 1_beta5= 1_beta6= 1_beta7= 1_beta8= 1_beta9= 1_rc0= 1_rc1= 1_rc2= 1_rc3= 1_rc3a= 1_rc3b= 1_rc3c= 1_rc4= 1_rc5= 1_rc6= 1_rc6a= 1_rc7 |
Heap-based buffer overflow in the pnm_get_chunk function for xine 0.99.2, and other packages such as MPlayer that use the same code, allows remote attackers to execute arbitrary code via long PNA_TAG values, a different vulnerability than CVE-2004-1188.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free