Total vulnerabilities in the database
Heap-based buffer overflow in the pnm_get_chunk function for xine 0.99.2, and other packages such as MPlayer that use the same code, allows remote attackers to execute arbitrary code via long PNA_TAG values, a different vulnerability than CVE-2004-1188.
| Software | From | Fixed in |
|---|---|---|
| xine / xine | 1_rc6a | 1_rc6a.x |
| xine / xine | 1_beta9 | 1_beta9.x |
| mplayer / mplayer | 0.92 | 0.92.x |
| xine / xine | 0.9.18 | 0.9.18.x |
| xine / xine | 1_beta3 | 1_beta3.x |
| xine / xine | 1_rc0a | 1_rc0a.x |
| xine / xine-lib | 1_beta7 | 1_beta7.x |
| mplayer / mplayer | 1.0_pre2 | 1.0_pre2.x |
| mplayer / mplayer | 0.90 | 0.90.x |
| xine / xine | 1_rc7 | 1_rc7.x |
| mplayer / mplayer | 1.0_pre1 | 1.0_pre1.x |
| mplayer / mplayer | 0.90_rc | 0.90_rc.x |
| xine / xine-lib | 1_rc3 | 1_rc3.x |
| xine / xine | 1_rc4 | 1_rc4.x |
| xine / xine-lib | 1_beta9 | 1_beta9.x |
| mplayer / mplayer | 1.0_pre5try2 | 1.0_pre5try2.x |
| xine / xine | 1_alpha | 1_alpha.x |
| xine / xine-lib | 1_rc3b | 1_rc3b.x |
| xine / xine-lib | 1_alpha | 1_alpha.x |
| xine / xine | 1_beta4 | 1_beta4.x |
| mplayer / mplayer | head_cvs | head_cvs.x |
| mplayer / mplayer | 0.92.1 | 0.92.1.x |
| xine / xine-lib | 0.9.8 | 0.9.8.x |
| xine / xine-lib | 1_beta4 | 1_beta4.x |
| xine / xine-lib | 1_rc5 | 1_rc5.x |
| xine / xine | 1_rc3b | 1_rc3b.x |
| xine / xine | 1_beta2 | 1_beta2.x |
| xine / xine | 0.9.8 | 0.9.8.x |
| mplayer / mplayer | 1.0_pre3 | 1.0_pre3.x |
| xine / xine | 1_rc3a | 1_rc3a.x |
| xine / xine-lib | 1_rc6a | 1_rc6a.x |
| xine / xine | 1_rc2 | 1_rc2.x |
| xine / xine | 1_rc8 | 1_rc8.x |
| xine / xine-lib | 1_rc3c | 1_rc3c.x |
| mplayer / mplayer | 0.92_cvs | 0.92_cvs.x |
| xine / xine | 1_beta10 | 1_beta10.x |
| mplayer / mplayer | 1.0_pre5 | 1.0_pre5.x |
| xine / xine | 1_beta12 | 1_beta12.x |
| mplayer / mplayer | 0.91 | 0.91.x |
| xine / xine | 1_beta11 | 1_beta11.x |
| xine / xine | 1_beta7 | 1_beta7.x |
| xine / xine | 1_beta8 | 1_beta8.x |
| xine / xine | 0.9.13 | 0.9.13.x |
| xine / xine | 1_rc1 | 1_rc1.x |
| xine / xine-lib | 1_rc2 | 1_rc2.x |
| xine / xine | 1_rc5 | 1_rc5.x |
| xine / xine-lib | 1_beta2 | 1_beta2.x |
| xine / xine-lib | 1_rc0 | 1_rc0.x |
| xine / xine-lib | 1_beta5 | 1_beta5.x |
| xine / xine-lib | 1_beta11 | 1_beta11.x |
| mplayer / mplayer | 1.0_pre5try1 | 1.0_pre5try1.x |
| xine / xine | 1_beta6 | 1_beta6.x |
| xine / xine-lib | 0.99 | 0.99.x |
| xine / xine | 1_beta1 | 1_beta1.x |
| xine / xine-lib | 0.9.13 | 0.9.13.x |
| xine / xine-lib | 1_rc6 | 1_rc6.x |
| mplayer / mplayer | 1.0_pre3try2 | 1.0_pre3try2.x |
| xine / xine | 1_rc6 | 1_rc6.x |
| xine / xine-lib | 1_beta6 | 1_beta6.x |
| xine / xine | 1_rc3 | 1_rc3.x |
| xine / xine-lib | 1_rc1 | 1_rc1.x |
| xine / xine-lib | 1_rc3a | 1_rc3a.x |
| xine / xine-lib | 1_beta1 | 1_beta1.x |
| xine / xine | 1_rc0 | 1_rc0.x |
| xine / xine-lib | 1_beta12 | 1_beta12.x |
| xine / xine-lib | 1_rc4 | 1_rc4.x |
| mplayer / mplayer | 0.90_pre | 0.90_pre.x |
| xine / xine | 1_beta5 | 1_beta5.x |
| xine / xine-lib | 1_beta10 | 1_beta10.x |
| mplayer / mplayer | 0.90_rc4 | 0.90_rc4.x |
| xine / xine-lib | 1_beta8 | 1_beta8.x |
| mplayer / mplayer | 1.0_pre4 | 1.0_pre4.x |
| xine / xine-lib | 1_beta3 | 1_beta3.x |
| xine / xine-lib | 1_rc7 | 1_rc7.x |
| mandrakesoft / mandrake_linux | 10.1 | 10.1.x |
| mandrakesoft / mandrake_linux | 10.0 | 10.0.x |