NVD

Id
71577  
Name
CVE-2004-1188  
Description
The pnm_get_chunk function in xine 0.99.2 and earlier, and other packages such as MPlayer that use the same code, does not properly verify that the chunk size is less than the PREAMBLE_SIZE, which causes a read operation with a negative length that leads to a buffer overflow via (1) RMF_TAG, (2) DATA_TAG, (3) PROP_TAG, (4) MDPR_TAG, and (5) CONT_TAG values, a different vulnerability than CVE-2004-1187.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2005-01-10  
Modified Date
2017-07-10  
Seq
2004-1188  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
370280 71577 CVE-2004-1188 http://cvs.sourceforge.net/viewcvs.py/xine/xine-lib/src/input/pnm.c?r1=1.20&r2=1.21  View
370281 71577 CVE-2004-1188 20041221 Multiple Vendor Xine version 0.99.2 PNM Handler Negative Read Length Heap Overflow Vulnerability  View
370282 71577 CVE-2004-1188 MDKSA-2005:011  View
370283 71577 CVE-2004-1188 http://www.mplayerhq.hu/MPlayer/patches/pnm_fix_20041215.diff  View
370284 71577 CVE-2004-1188 xine-pnmgetchunk-bo(18638)  View

Related JVN