What’s Vulnerable › Vulnerabilities
CVE-2004-1188
- Severity: critical (CVSS 10.0 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 2.0% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2005-01-10 · updated 2026-06-16
Description
The pnm_get_chunk function in xine 0.99.2 and earlier, and other packages such as MPlayer that use the same code, does not properly verify that the chunk size is less than the PREAMBLE_SIZE, which causes a read operation with a negative length that leads to a buffer overflow via (1) RMF_TAG, (2) DATA_TAG, (3) PROP_TAG, (4) MDPR_TAG, and (5) CONT_TAG values, a different vulnerability than CVE-2004-1187.
Affected products
- Mandrakesoft Mandrake Linux: 10.0, 10.1
- Mplayer: 0.90, 0.90_pre, 0.90_rc, 0.90_rc4, 0.91, 0.92 (+11)
- Xine: 0.9.8, 0.9.13, 0.9.18, 1_alpha, 1_beta1, 1_beta2 (+23)
- Xine-Lib: 0.9.8, 0.9.13, 0.99, 1_alpha, 1_beta1, 1_beta2 (+22)
References
- http://cvs.sourceforge.net/viewcvs.py/xine/xine-lib/src/input/pnm.c?r1=1.20&r2=1.21
- http://www.idefense.com/application/poi/display?id=177&type=vulnerabilities
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:011
- http://www.mplayerhq.hu/MPlayer/patches/pnm_fix_20041215.diff
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18638
- http://cvs.sourceforge.net/viewcvs.py/xine/xine-lib/src/input/pnm.c?r1=1.20&r2=1.21
- http://www.idefense.com/application/poi/display?id=177&type=vulnerabilities
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:011
- http://www.mplayerhq.hu/MPlayer/patches/pnm_fix_20041215.diff
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18638
Get alerted when CVE-2004-1188 or the next vulnerability affects your stack