CVE-2004-1188 : 상세 정보

CVE-2004-1188

0.5%V4
2004-12-22
05h00 +00:00
Network
2024-08-08
00h46 +00:00
CVE.org
NVD
특정 CVE 알림
특정 CVE의 변경 사항에 대한 정보를 받아보세요.
알림 관리

CVE 설명

The pnm_get_chunk function in xine 0.99.2 and earlier, and other packages such as MPlayer that use the same code, does not properly verify that the chunk size is less than the PREAMBLE_SIZE, which causes a read operation with a negative length that leads to a buffer overflow via (1) RMF_TAG, (2) DATA_TAG, (3) PROP_TAG, (4) MDPR_TAG, and (5) CONT_TAG values, a different vulnerability than CVE-2004-1187.

CVE 정보

메트릭

메트릭 점수 심각도 CVSS 벡터 출처
V2 10 AV:N/AC:L/Au:N/C:C/I:C/A:C nvd@nist.gov

EPSS

EPSS는 취약점이 악용될 가능성을 예측하는 점수 모델입니다.

EPSS 점수

EPSS 모델은 0과 1(0~100%) 사이의 확률 점수를 생성합니다. 점수가 높을수록 취약점이 악용될 가능성이 높습니다.

EPSS 백분위수

백분위수는 EPSS 점수에 따라 CVE의 순위를 매기는 데 사용됩니다. 예를 들어 EPSS 점수 기준 95번째 백분위수의 CVE는 다른 CVE의 95%보다 악용될 가능성이 높습니다.
EPSS First.org

언급된 제품

구성 0

Mplayer>>Mplayer >> Version 0.90

Mplayer>>Mplayer >> Version 0.90_pre

Mplayer>>Mplayer >> Version 0.90_rc

Mplayer>>Mplayer >> Version 0.90_rc4

Mplayer>>Mplayer >> Version 0.91

Mplayer>>Mplayer >> Version 0.92

Mplayer>>Mplayer >> Version 0.92.1

Mplayer>>Mplayer >> Version 0.92_cvs

Mplayer>>Mplayer >> Version 1.0_pre1

Mplayer>>Mplayer >> Version 1.0_pre2

Mplayer>>Mplayer >> Version 1.0_pre3

Mplayer>>Mplayer >> Version 1.0_pre3try2

Mplayer>>Mplayer >> Version 1.0_pre4

Mplayer>>Mplayer >> Version 1.0_pre5

Mplayer>>Mplayer >> Version 1.0_pre5try1

Mplayer>>Mplayer >> Version 1.0_pre5try2

Mplayer>>Mplayer >> Version head_cvs

Xine>>Xine >> Version 0.9.8

Xine>>Xine >> Version 0.9.13

Xine>>Xine >> Version 0.9.18

Xine>>Xine >> Version 1_alpha

Xine>>Xine >> Version 1_beta1

Xine>>Xine >> Version 1_beta2

Xine>>Xine >> Version 1_beta3

Xine>>Xine >> Version 1_beta4

Xine>>Xine >> Version 1_beta5

Xine>>Xine >> Version 1_beta6

Xine>>Xine >> Version 1_beta7

Xine>>Xine >> Version 1_beta8

Xine>>Xine >> Version 1_beta9

Xine>>Xine >> Version 1_beta10

Xine>>Xine >> Version 1_beta11

Xine>>Xine >> Version 1_beta12

Xine>>Xine >> Version 1_rc0

Xine>>Xine >> Version 1_rc0a

Xine>>Xine >> Version 1_rc1

Xine>>Xine >> Version 1_rc2

Xine>>Xine >> Version 1_rc3

Xine>>Xine >> Version 1_rc3a

Xine>>Xine >> Version 1_rc3b

Xine>>Xine >> Version 1_rc4

Xine>>Xine >> Version 1_rc5

Xine>>Xine >> Version 1_rc6

Xine>>Xine >> Version 1_rc6a

Xine>>Xine >> Version 1_rc7

Xine>>Xine >> Version 1_rc8

Xine>>Xine-lib >> Version 0.9.8

Xine>>Xine-lib >> Version 0.9.13

Xine>>Xine-lib >> Version 0.99

Xine>>Xine-lib >> Version 1_alpha

Xine>>Xine-lib >> Version 1_beta1

Xine>>Xine-lib >> Version 1_beta2

Xine>>Xine-lib >> Version 1_beta3

Xine>>Xine-lib >> Version 1_beta4

Xine>>Xine-lib >> Version 1_beta5

Xine>>Xine-lib >> Version 1_beta6

Xine>>Xine-lib >> Version 1_beta7

Xine>>Xine-lib >> Version 1_beta8

Xine>>Xine-lib >> Version 1_beta9

Xine>>Xine-lib >> Version 1_beta10

Xine>>Xine-lib >> Version 1_beta11

Xine>>Xine-lib >> Version 1_beta12

Xine>>Xine-lib >> Version 1_rc0

Xine>>Xine-lib >> Version 1_rc1

Xine>>Xine-lib >> Version 1_rc2

Xine>>Xine-lib >> Version 1_rc3

Xine>>Xine-lib >> Version 1_rc3a

Xine>>Xine-lib >> Version 1_rc3b

Xine>>Xine-lib >> Version 1_rc3c

Xine>>Xine-lib >> Version 1_rc4

Xine>>Xine-lib >> Version 1_rc5

Xine>>Xine-lib >> Version 1_rc6

Xine>>Xine-lib >> Version 1_rc6a

Xine>>Xine-lib >> Version 1_rc7

구성 0

Mandrakesoft>>Mandrake_linux >> Version 10.0

Mandrakesoft>>Mandrake_linux >> Version 10.0

Mandrakesoft>>Mandrake_linux >> Version 10.1

Mandrakesoft>>Mandrake_linux >> Version 10.1

참고 자료

http://www.mandriva.com/security/advisories?name=MDKSA-2005:011
Tags : vendor-advisory, x_refsource_MANDRAKE
CVE Find에 제시된 정보는 엄선된 여러 참고 소스에서 가져옵니다. CVE 데이터는 MITRE Corporation과 국가 취약점 데이터베이스(NVD)에서 제공됩니다. KEV 카탈로그는 CISA에서 가져오며, EPSS 점수는 FIRST.org에서 제공됩니다. CWE 및 CAPEC 데이터는 MITRE Corporation에서 관리하며, CPE 정보는 NVD에서 제공됩니다.