Vulnerability Database

289,689

Total vulnerabilities in the database

CVE-2004-0433

Multiple buffer overflows in the Real-Time Streaming Protocol (RTSP) client for (1) MPlayer before 1.0pre4 and (2) xine lib (xine-lib) before 1-rc4, when playing Real RTSP (realrtsp) streams, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (a) long URLs, (b) long Real server responses, or (c) long Real Data Transport (RDT) packets.

  • Published: Aug 18, 2004
  • Updated: Apr 13, 2023
  • CVE: CVE-2004-0433
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 10
  • AV:N/AC:L/Au:N/C:C/I:C/A:C

No CWE or OWASP classifications available.

Software From Fixed in
xine / xine-lib 1_beta7 1_beta7.x
xine / xine-lib 1_beta9 1_beta9.x
xine / xine-lib 1_rc3b 1_rc3b.x
xine / xine-lib 1_beta4 1_beta4.x
xine / xine-lib 1_rc3c 1_rc3c.x
xine / xine-lib 1_rc2 1_rc2.x
xine / xine-lib 1_beta2 1_beta2.x
xine / xine-lib 1_beta5 1_beta5.x
xine / xine-lib 1_beta11 1_beta11.x
mplayer / mplayer 1.0_pre3try2 1.0_pre3try2.x
xine / xine-lib 1_beta6 1_beta6.x
xine / xine-lib 1_rc3a 1_rc3a.x
xine / xine-lib 1_beta1 1_beta1.x
xine / xine-lib 1_beta10 1_beta10.x
xine / xine-lib 1_beta8 1_beta8.x
xine / xine-lib 1_beta3 1_beta3.x