Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

xine xine 1 alpha vulnerabilities and exploits

(subscribe to this query)
NA

CVE-2006-1905

Multiple format string vulnerabilities in xiTK (xitk/main.c) in xine 0.99.3 allow remote malicious users to execute arbitrary code via format string specifiers in a long filename on an EXTINFO line in a playlist file.
Xine Xine 1 Rc6aXine Xine 1.0.1Xine Xine 1 Beta9Xine Xine 0.9.18Xine Xine 1 Beta3Xine Xine 1 Rc0aXine Xine 1 Rc7Xine Xine 1 Rc4Xine Xine 1 AlphaXine Xine 1 Beta4Xine Xine 1 Rc3bXine Xine 1 Beta2Xine Xine 0.9.8Xine Xine 1 Rc3aXine Xine 1 Rc2Xine Xine 1 Rc8Xine Xine 1.0Xine Xine 1 Beta10Xine Xine 1 Beta12Xine Xine 1 Beta11Xine Xine 1 Beta7Xine Xine 1 Beta8
NA

CVE-2004-1187

Heap-based buffer overflow in the pnm_get_chunk function for xine 0.99.2, and other packages such as MPlayer that use the same code, allows remote malicious users to execute arbitrary code via long PNA_TAG values, a different vulnerability than CVE-2004-1188.
Xine Xine 1 Rc6aXine Xine 1 Beta9Mplayer Mplayer 0.92Xine Xine 0.9.18Xine Xine 1 Beta3Xine Xine 1 Rc0aXine Xine-lib 1 Beta7Mplayer Mplayer 1.0 Pre2Mplayer Mplayer 0.90Xine Xine 1 Rc7Mplayer Mplayer 1.0 Pre1Mplayer Mplayer 0.90 RcXine Xine-lib 1 Rc3Xine Xine 1 Rc4Xine Xine-lib 1 Beta9Mplayer Mplayer 1.0 Pre5try2Xine Xine 1 AlphaXine Xine-lib 1 Rc3bXine Xine-lib 1 AlphaXine Xine 1 Beta4Mplayer Mplayer Head CvsMplayer Mplayer 0.92.1
NA

CVE-2004-1188

The pnm_get_chunk function in xine 0.99.2 and previous versions, and other packages such as MPlayer that use the same code, does not properly verify that the chunk size is less than the PREAMBLE_SIZE, which causes a read operation with a negative length that leads to a buffer ove...
Xine Xine 1 Rc6aXine Xine 1 Beta9Mplayer Mplayer 0.92Xine Xine 0.9.18Xine Xine 1 Beta3Xine Xine 1 Rc0aXine Xine-lib 1 Beta7Mplayer Mplayer 1.0 Pre2Mplayer Mplayer 0.90Xine Xine 1 Rc7Mplayer Mplayer 1.0 Pre1Mplayer Mplayer 0.90 RcXine Xine-lib 1 Rc3Xine Xine 1 Rc4Xine Xine-lib 1 Beta9Mplayer Mplayer 1.0 Pre5try2Xine Xine 1 AlphaXine Xine-lib 1 Rc3bXine Xine-lib 1 AlphaXine Xine 1 Beta4Mplayer Mplayer Head CvsMplayer Mplayer 0.92.1
NA

CVE-2004-1951

xine 1.x alpha, 1.x beta, and 1.0rc up to and including 1.0rc3a, and xine-ui 0.9.21 to 0.9.23 allows remote malicious users to overwrite arbitrary files via the (1) audio.sun_audio_device or (2) dxr3.devicename options in an MRL link.
Xine Xine 1 Beta9Xine Xine 1 Beta3Xine Xine 1 Rc0aXine Xine-lib 1 Rc3bXine Xine 1 Beta4Xine Xine 1 Rc3bXine Xine 1 Beta2Xine Xine 0.9.8Xine Xine 1 Rc3aXine Xine-ui 0.9.21Xine Xine 1 Rc2Xine Xine-lib 1 Rc3cXine Xine 1 Beta10Xine Xine 1 Beta12Xine Xine-ui 0.9.23Xine Xine 1 Beta11Xine Xine 1 Beta7Xine Xine 1 Beta8Xine Xine 0.9.13Xine Xine 1 Rc1Xine Xine-lib 1 Rc2Xine Xine 1 Beta6
NA

CVE-2004-1379

Heap-based buffer overflow in the DVD subpicture decoder in xine xine-lib 1-rc5 and previous versions allows remote malicious users to execute arbitrary code via a (1) DVD or (2) MPEG subpicture header where the second field reuses RLE data from the end of the first field.
Xine Xine 1 Beta9Xine Xine 1 Beta3Xine Xine 1 Rc0aXine Xine-lib 1 Beta7Xine Xine-lib 1 Rc3Xine Xine 1 Rc4Xine Xine-lib 1 Beta9Xine Xine 1 AlphaXine Xine-lib 1 Rc3bXine Xine 1 Beta4Xine Xine-lib 0.9.8Xine Xine-lib 1 Beta4Xine Xine-lib 1 Rc5Xine Xine 1 Rc3bXine Xine 1 Beta2Xine Xine 1 Rc3aXine Xine 1 Rc2Xine Xine-lib 1 Rc3cXine Xine 1 Beta10Xine Xine 1 Beta12Xine Xine 1 Beta11Xine Xine 1 Beta7
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-37316firmwareCVE-2024-30078CVE-2024-5995remote code executionlogic flawCVE-2024-20693CVE-2024-37315CVE-2024-5464
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook