CVE-2004-0372

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-04-15 · updated 2026-06-16

Description

xine allows local users to overwrite arbitrary files via a symlink attack on a bug report email that is generated by the (1) xine-bugreport or (2) xine-check scripts.

Affected products

Xine: 0.9.13, 1_beta1, 1_beta2, 1_beta3, 1_beta4, 1_beta5 (+13)

References

http://marc.info/?l=bugtraq&m=107997911025558&w=2
http://security.gentoo.org/glsa/glsa-200404-20.xml
http://www.debian.org/security/2004/dsa-477
http://www.securityfocus.com/bid/9939
https://exchange.xforce.ibmcloud.com/vulnerabilities/15564
http://marc.info/?l=bugtraq&m=107997911025558&w=2
http://security.gentoo.org/glsa/glsa-200404-20.xml
http://www.debian.org/security/2004/dsa-477
http://www.securityfocus.com/bid/9939
https://exchange.xforce.ibmcloud.com/vulnerabilities/15564

Get alerted when CVE-2004-0372 or the next vulnerability affects your stack