p PatchFirst

CVE-2004-0433

CVE-2004-0433

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Multiple buffer overflows in the Real-Time Streaming Protocol (RTSP) client for (1) MPlayer before 1.0pre4 and (2) xine lib (xine-lib) before 1-rc4, when playing Real RTSP (realrtsp) streams, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (a) long URLs, (b) long Real server responses, or (c) long Real Data Transport (RDT) packets.

EPSS 5.1% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • mplayer Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.0~pre6a-1

    Update to 1.0~pre6a-1

  • mplayer Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.0~pre6a-1

    Update to 1.0~pre6a-1

  • mplayer Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.0~pre6a-1

    Update to 1.0~pre6a-1

Original sources

Check your server →