CVE-2004-1455

Stack-based buffer overflow in Xine-lib-rc5 in xine-lib 1_rc5-r2 and earlier allows remote attackers to execute arbitrary code via crafted playlists that result in a long vcd:// URL.

CVSS v2.0 5.1 MEDIUM

5.1^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability : 4.9 / Impact : 6.4

Access Vector NETWORK

Access Complexity HIGH

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://marc.info/?l=bugtraq&m=109284737628045&w=2
http://open-security.org/advisories/6
http://secunia.com/advisories/12194/
http://www.gentoo.org/security/en/glsa/glsa-200408-18.xml	Patch
http://www.securityfocus.com/bid/10890	Exploit Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/16930
http://marc.info/?l=bugtraq&m=109284737628045&w=2
http://open-security.org/advisories/6
http://secunia.com/advisories/12194/
http://www.gentoo.org/security/en/glsa/glsa-200408-18.xml	Patch
http://www.securityfocus.com/bid/10890	Exploit Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/16930

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:xine:xine-lib:1_beta1:::::::*
	cpe:2.3:a:xine:xine-lib:1_beta2:::::::*
	cpe:2.3:a:xine:xine-lib:1_beta3:::::::*
	cpe:2.3:a:xine:xine-lib:1_beta4:::::::*
	cpe:2.3:a:xine:xine-lib:1_beta5:::::::*
	cpe:2.3:a:xine:xine-lib:1_beta6:::::::*
	cpe:2.3:a:xine:xine-lib:1_beta7:::::::*
	cpe:2.3:a:xine:xine-lib:1_beta8:::::::*
	cpe:2.3:a:xine:xine-lib:1_beta9:::::::*
	cpe:2.3:a:xine:xine-lib:1_beta10:::::::*
	cpe:2.3:a:xine:xine-lib:1_beta11:::::::*
	cpe:2.3:a:xine:xine-lib:1_rc2:::::::*
	cpe:2.3:a:xine:xine-lib:1_rc3a:::::::*
	cpe:2.3:a:xine:xine-lib:1_rc3b:::::::*
	cpe:2.3:a:xine:xine-lib:1_rc3c:::::::*
	cpe:2.3:a:xine:xine-lib:1_rc4:::::::*
	cpe:2.3:a:xine:xine-lib:1_rc5:::::::*
	cpe:2.3:a:xine:xine-lib:1_rc5_r2:::::::*

History

20 Nov 2024, 23:50

Type	Values Removed	Values Added
References	~~() http://marc.info/?l=bugtraq&m=109284737628045&w=2 -~~	() http://marc.info/?l=bugtraq&m=109284737628045&w=2 -
References	~~() http://open-security.org/advisories/6 -~~	() http://open-security.org/advisories/6 -
References	~~() http://secunia.com/advisories/12194/ -~~	() http://secunia.com/advisories/12194/ -
References	~~() http://www.gentoo.org/security/en/glsa/glsa-200408-18.xml - Patch~~	() http://www.gentoo.org/security/en/glsa/glsa-200408-18.xml - Patch
References	~~() http://www.securityfocus.com/bid/10890 - Exploit, Patch~~	() http://www.securityfocus.com/bid/10890 - Exploit, Patch
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/16930 -~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/16930 -

Information

Published : 2004-12-31 05:00

Updated : 2025-04-03 01:03

NVD link : CVE-2004-1455

Mitre link : CVE-2004-1455

CVE.ORG link : CVE-2004-1455

JSON object : View

Products Affected

xine

xine-lib

CWE

NVD-CWE-Other

{"id": "CVE-2004-1455", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.1, "accessVector": "NETWORK", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "HIGH", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 4.9, "obtainUserPrivilege": true, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2004-12-31T05:00:00.000", "references": [{"url": "http://marc.info/?l=bugtraq&m=109284737628045&w=2", "source": "cve@mitre.org"}, {"url": "http://open-security.org/advisories/6", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/12194/", "source": "cve@mitre.org"}, {"url": "http://www.gentoo.org/security/en/glsa/glsa-200408-18.xml", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/10890", "tags": ["Exploit", "Patch"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16930", "source": "cve@mitre.org"}, {"url": "http://marc.info/?l=bugtraq&m=109284737628045&w=2", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://open-security.org/advisories/6", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/12194/", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.gentoo.org/security/en/glsa/glsa-200408-18.xml", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/10890", "tags": ["Exploit", "Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16930", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Stack-based buffer overflow in Xine-lib-rc5 in xine-lib 1_rc5-r2 and earlier allows remote attackers to execute arbitrary code via crafted playlists that result in a long vcd:// URL."}], "lastModified": "2025-04-03T01:03:51.193", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:xine:xine-lib:1_beta1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4C87793C-6577-4E67-BBFD-768FAF1BF88D"}, {"criteria": "cpe:2.3:a:xine:xine-lib:1_beta2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DFE9819F-A620-41A6-A102-41746457753F"}, {"criteria": "cpe:2.3:a:xine:xine-lib:1_beta3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A7D6474F-C678-498C-9A61-287E2FDD8B2D"}, {"criteria": "cpe:2.3:a:xine:xine-lib:1_beta4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "06402BDD-77EA-447A-8C34-E1A0F41D0628"}, {"criteria": "cpe:2.3:a:xine:xine-lib:1_beta5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7387773A-81F1-464A-9489-E103C51BED46"}, {"criteria": "cpe:2.3:a:xine:xine-lib:1_beta6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A03194CD-2CFA-4F11-90DE-3573BA06B6DC"}, {"criteria": "cpe:2.3:a:xine:xine-lib:1_beta7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1C39D002-E323-423D-8895-9179DFDF6535"}, {"criteria": "cpe:2.3:a:xine:xine-lib:1_beta8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "73E621C7-A5BA-4D71-9D57-4311360FF3A6"}, {"criteria": "cpe:2.3:a:xine:xine-lib:1_beta9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B08810F9-377D-49C4-A9A8-E2EE42EDF2F5"}, {"criteria": "cpe:2.3:a:xine:xine-lib:1_beta10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6AA12911-93D8-4DFE-A31C-FEB9E7F7ADD6"}, {"criteria": "cpe:2.3:a:xine:xine-lib:1_beta11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9C13E4FD-A874-4366-A426-19665B43F1DD"}, {"criteria": "cpe:2.3:a:xine:xine-lib:1_rc2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7C8F4701-C5CC-4FBA-AFF6-5AB890306AC3"}, {"criteria": "cpe:2.3:a:xine:xine-lib:1_rc3a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3295F345-26D0-4B23-848F-83CFE067EA01"}, {"criteria": "cpe:2.3:a:xine:xine-lib:1_rc3b:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D2915303-7347-4811-B7D2-5AF367081797"}, {"criteria": "cpe:2.3:a:xine:xine-lib:1_rc3c:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6976E802-011F-44A2-B668-F9D643FC7A86"}, {"criteria": "cpe:2.3:a:xine:xine-lib:1_rc4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "08B7236E-DCFB-40DB-BFC8-88F8491BBD69"}, {"criteria": "cpe:2.3:a:xine:xine-lib:1_rc5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EDF4423C-790B-411A-9AEC-2B36DA0140AA"}, {"criteria": "cpe:2.3:a:xine:xine-lib:1_rc5_r2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B7CE4165-ED54-4AFC-A584-C145A96819D9"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}

5.1 /10