Read the docs
TI-2004-01081 Aliases CVE-2004-1188GHSA-4x57-68g7-9v3f

The pnm_get_chunk function in xine 0.99.2 and earlier, and other packages such as MPlayer…

Priority MEDIUM 47Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Complete · Complete · Complete
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

The pnm_get_chunk function in xine 0.99.2 and earlier, and other packages such as MPlayer that use the same code, does not properly verify that the chunk size is less than the PREAMBLE_SIZE, which causes a read operation with a negative length that leads to a buffer overflow via (1) RMF_TAG, (2) DATA_TAG, (3) PROP_TAG, (4) MDPR_TAG, and (5) CONT_TAG values, a different vulnerability than CVE-2004-1187.

Why it matters now

EPSS 0.01965 80th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 78

CPEVersionsRoleVendor
cpe:2.3:a:mplayer:mplayer:0.90:*:*:*:*:*:*:*0.90VulnerableMplayer
cpe:2.3:a:mplayer:mplayer:0.90_pre:*:*:*:*:*:*:*0.90_preVulnerableMplayer
cpe:2.3:a:mplayer:mplayer:0.90_rc:*:*:*:*:*:*:*0.90_rcVulnerableMplayer
cpe:2.3:a:mplayer:mplayer:0.90_rc4:*:*:*:*:*:*:*0.90_rc4VulnerableMplayer
cpe:2.3:a:mplayer:mplayer:0.91:*:*:*:*:*:*:*0.91VulnerableMplayer
cpe:2.3:a:mplayer:mplayer:0.92:*:*:*:*:*:*:*0.92VulnerableMplayer
cpe:2.3:a:mplayer:mplayer:0.92.1:*:*:*:*:*:*:*0.92.1VulnerableMplayer
cpe:2.3:a:mplayer:mplayer:0.92_cvs:*:*:*:*:*:*:*0.92_cvsVulnerableMplayer
cpe:2.3:a:mplayer:mplayer:1.0_pre1:*:*:*:*:*:*:*1.0_pre1VulnerableMplayer
cpe:2.3:a:mplayer:mplayer:1.0_pre2:*:*:*:*:*:*:*1.0_pre2VulnerableMplayer
  • cpe:2.3:a:mplayer:mplayer:0.90:*:*:*:*:*:*:* Versions 0.90 Vulnerable ·Mplayer
  • cpe:2.3:a:mplayer:mplayer:0.90_pre:*:*:*:*:*:*:* Versions 0.90_pre Vulnerable ·Mplayer
  • cpe:2.3:a:mplayer:mplayer:0.90_rc:*:*:*:*:*:*:* Versions 0.90_rc Vulnerable ·Mplayer
  • cpe:2.3:a:mplayer:mplayer:0.90_rc4:*:*:*:*:*:*:* Versions 0.90_rc4 Vulnerable ·Mplayer
  • cpe:2.3:a:mplayer:mplayer:0.91:*:*:*:*:*:*:* Versions 0.91 Vulnerable ·Mplayer
  • cpe:2.3:a:mplayer:mplayer:0.92:*:*:*:*:*:*:* Versions 0.92 Vulnerable ·Mplayer
  • cpe:2.3:a:mplayer:mplayer:0.92.1:*:*:*:*:*:*:* Versions 0.92.1 Vulnerable ·Mplayer
  • cpe:2.3:a:mplayer:mplayer:0.92_cvs:*:*:*:*:*:*:* Versions 0.92_cvs Vulnerable ·Mplayer
  • cpe:2.3:a:mplayer:mplayer:1.0_pre1:*:*:*:*:*:*:* Versions 1.0_pre1 Vulnerable ·Mplayer
  • cpe:2.3:a:mplayer:mplayer:1.0_pre2:*:*:*:*:*:*:* Versions 1.0_pre2 Vulnerable ·Mplayer
Show 68 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:mplayer:mplayer:1.0_pre3:*:*:*:*:*:*:*1.0_pre3VulnerableMplayer
cpe:2.3:a:mplayer:mplayer:1.0_pre3try2:*:*:*:*:*:*:*1.0_pre3try2VulnerableMplayer
cpe:2.3:a:mplayer:mplayer:1.0_pre4:*:*:*:*:*:*:*1.0_pre4VulnerableMplayer
cpe:2.3:a:mplayer:mplayer:1.0_pre5:*:*:*:*:*:*:*1.0_pre5VulnerableMplayer
cpe:2.3:a:mplayer:mplayer:1.0_pre5try1:*:*:*:*:*:*:*1.0_pre5try1VulnerableMplayer
cpe:2.3:a:mplayer:mplayer:1.0_pre5try2:*:*:*:*:*:*:*1.0_pre5try2VulnerableMplayer
cpe:2.3:a:mplayer:mplayer:head_cvs:*:*:*:*:*:*:*head_cvsVulnerableMplayer
cpe:2.3:a:xine:xine:0.9.8:*:*:*:*:*:*:*0.9.8VulnerableXine
cpe:2.3:a:xine:xine:0.9.13:*:*:*:*:*:*:*0.9.13VulnerableXine
cpe:2.3:a:xine:xine:0.9.18:*:*:*:*:*:*:*0.9.18VulnerableXine
cpe:2.3:a:xine:xine:1_alpha:*:*:*:*:*:*:*1_alphaVulnerableXine
cpe:2.3:a:xine:xine:1_beta1:*:*:*:*:*:*:*1_beta1VulnerableXine
cpe:2.3:a:xine:xine:1_beta2:*:*:*:*:*:*:*1_beta2VulnerableXine
cpe:2.3:a:xine:xine:1_beta3:*:*:*:*:*:*:*1_beta3VulnerableXine
cpe:2.3:a:xine:xine:1_beta4:*:*:*:*:*:*:*1_beta4VulnerableXine
cpe:2.3:a:xine:xine:1_beta5:*:*:*:*:*:*:*1_beta5VulnerableXine
cpe:2.3:a:xine:xine:1_beta6:*:*:*:*:*:*:*1_beta6VulnerableXine
cpe:2.3:a:xine:xine:1_beta7:*:*:*:*:*:*:*1_beta7VulnerableXine
cpe:2.3:a:xine:xine:1_beta8:*:*:*:*:*:*:*1_beta8VulnerableXine
cpe:2.3:a:xine:xine:1_beta9:*:*:*:*:*:*:*1_beta9VulnerableXine
cpe:2.3:a:xine:xine:1_beta10:*:*:*:*:*:*:*1_beta10VulnerableXine
cpe:2.3:a:xine:xine:1_beta11:*:*:*:*:*:*:*1_beta11VulnerableXine
cpe:2.3:a:xine:xine:1_beta12:*:*:*:*:*:*:*1_beta12VulnerableXine
cpe:2.3:a:xine:xine:1_rc0:*:*:*:*:*:*:*1_rc0VulnerableXine
cpe:2.3:a:xine:xine:1_rc0a:*:*:*:*:*:*:*1_rc0aVulnerableXine
cpe:2.3:a:xine:xine:1_rc1:*:*:*:*:*:*:*1_rc1VulnerableXine
cpe:2.3:a:xine:xine:1_rc2:*:*:*:*:*:*:*1_rc2VulnerableXine
cpe:2.3:a:xine:xine:1_rc3:*:*:*:*:*:*:*1_rc3VulnerableXine
cpe:2.3:a:xine:xine:1_rc3a:*:*:*:*:*:*:*1_rc3aVulnerableXine
cpe:2.3:a:xine:xine:1_rc3b:*:*:*:*:*:*:*1_rc3bVulnerableXine
cpe:2.3:a:xine:xine:1_rc4:*:*:*:*:*:*:*1_rc4VulnerableXine
cpe:2.3:a:xine:xine:1_rc5:*:*:*:*:*:*:*1_rc5VulnerableXine
cpe:2.3:a:xine:xine:1_rc6:*:*:*:*:*:*:*1_rc6VulnerableXine
cpe:2.3:a:xine:xine:1_rc6a:*:*:*:*:*:*:*1_rc6aVulnerableXine
cpe:2.3:a:xine:xine:1_rc7:*:*:*:*:*:*:*1_rc7VulnerableXine
cpe:2.3:a:xine:xine:1_rc8:*:*:*:*:*:*:*1_rc8VulnerableXine
cpe:2.3:a:xine:xine-lib:0.9.8:*:*:*:*:*:*:*0.9.8VulnerableXine
cpe:2.3:a:xine:xine-lib:0.9.13:*:*:*:*:*:*:*0.9.13VulnerableXine
cpe:2.3:a:xine:xine-lib:0.99:*:*:*:*:*:*:*0.99VulnerableXine
cpe:2.3:a:xine:xine-lib:1_alpha:*:*:*:*:*:*:*1_alphaVulnerableXine
cpe:2.3:a:xine:xine-lib:1_beta1:*:*:*:*:*:*:*1_beta1VulnerableXine
cpe:2.3:a:xine:xine-lib:1_beta2:*:*:*:*:*:*:*1_beta2VulnerableXine
cpe:2.3:a:xine:xine-lib:1_beta3:*:*:*:*:*:*:*1_beta3VulnerableXine
cpe:2.3:a:xine:xine-lib:1_beta4:*:*:*:*:*:*:*1_beta4VulnerableXine
cpe:2.3:a:xine:xine-lib:1_beta5:*:*:*:*:*:*:*1_beta5VulnerableXine
cpe:2.3:a:xine:xine-lib:1_beta6:*:*:*:*:*:*:*1_beta6VulnerableXine
cpe:2.3:a:xine:xine-lib:1_beta7:*:*:*:*:*:*:*1_beta7VulnerableXine
cpe:2.3:a:xine:xine-lib:1_beta8:*:*:*:*:*:*:*1_beta8VulnerableXine
cpe:2.3:a:xine:xine-lib:1_beta9:*:*:*:*:*:*:*1_beta9VulnerableXine
cpe:2.3:a:xine:xine-lib:1_beta10:*:*:*:*:*:*:*1_beta10VulnerableXine
cpe:2.3:a:xine:xine-lib:1_beta11:*:*:*:*:*:*:*1_beta11VulnerableXine
cpe:2.3:a:xine:xine-lib:1_beta12:*:*:*:*:*:*:*1_beta12VulnerableXine
cpe:2.3:a:xine:xine-lib:1_rc0:*:*:*:*:*:*:*1_rc0VulnerableXine
cpe:2.3:a:xine:xine-lib:1_rc1:*:*:*:*:*:*:*1_rc1VulnerableXine
cpe:2.3:a:xine:xine-lib:1_rc2:*:*:*:*:*:*:*1_rc2VulnerableXine
cpe:2.3:a:xine:xine-lib:1_rc3:*:*:*:*:*:*:*1_rc3VulnerableXine
cpe:2.3:a:xine:xine-lib:1_rc3a:*:*:*:*:*:*:*1_rc3aVulnerableXine
cpe:2.3:a:xine:xine-lib:1_rc3b:*:*:*:*:*:*:*1_rc3bVulnerableXine
cpe:2.3:a:xine:xine-lib:1_rc3c:*:*:*:*:*:*:*1_rc3cVulnerableXine
cpe:2.3:a:xine:xine-lib:1_rc4:*:*:*:*:*:*:*1_rc4VulnerableXine
cpe:2.3:a:xine:xine-lib:1_rc5:*:*:*:*:*:*:*1_rc5VulnerableXine
cpe:2.3:a:xine:xine-lib:1_rc6:*:*:*:*:*:*:*1_rc6VulnerableXine
cpe:2.3:a:xine:xine-lib:1_rc6a:*:*:*:*:*:*:*1_rc6aVulnerableXine
cpe:2.3:a:xine:xine-lib:1_rc7:*:*:*:*:*:*:*1_rc7VulnerableXine
cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*10.0VulnerableMandrakesoft
cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:*10.0VulnerableMandrakesoft
cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:*:*:*:*:*:*10.1VulnerableMandrakesoft
cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:x86_64:*:*:*:*:*10.1VulnerableMandrakesoft
  • cpe:2.3:a:mplayer:mplayer:1.0_pre3:*:*:*:*:*:*:* Versions 1.0_pre3 Vulnerable ·Mplayer
  • cpe:2.3:a:mplayer:mplayer:1.0_pre3try2:*:*:*:*:*:*:* Versions 1.0_pre3try2 Vulnerable ·Mplayer
  • cpe:2.3:a:mplayer:mplayer:1.0_pre4:*:*:*:*:*:*:* Versions 1.0_pre4 Vulnerable ·Mplayer
  • cpe:2.3:a:mplayer:mplayer:1.0_pre5:*:*:*:*:*:*:* Versions 1.0_pre5 Vulnerable ·Mplayer
  • cpe:2.3:a:mplayer:mplayer:1.0_pre5try1:*:*:*:*:*:*:* Versions 1.0_pre5try1 Vulnerable ·Mplayer
  • cpe:2.3:a:mplayer:mplayer:1.0_pre5try2:*:*:*:*:*:*:* Versions 1.0_pre5try2 Vulnerable ·Mplayer
  • cpe:2.3:a:mplayer:mplayer:head_cvs:*:*:*:*:*:*:* Versions head_cvs Vulnerable ·Mplayer
  • cpe:2.3:a:xine:xine:0.9.8:*:*:*:*:*:*:* Versions 0.9.8 Vulnerable ·Xine
  • cpe:2.3:a:xine:xine:0.9.13:*:*:*:*:*:*:* Versions 0.9.13 Vulnerable ·Xine
  • cpe:2.3:a:xine:xine:0.9.18:*:*:*:*:*:*:* Versions 0.9.18 Vulnerable ·Xine
  • cpe:2.3:a:xine:xine:1_alpha:*:*:*:*:*:*:* Versions 1_alpha Vulnerable ·Xine
  • cpe:2.3:a:xine:xine:1_beta1:*:*:*:*:*:*:* Versions 1_beta1 Vulnerable ·Xine
  • cpe:2.3:a:xine:xine:1_beta2:*:*:*:*:*:*:* Versions 1_beta2 Vulnerable ·Xine
  • cpe:2.3:a:xine:xine:1_beta3:*:*:*:*:*:*:* Versions 1_beta3 Vulnerable ·Xine
  • cpe:2.3:a:xine:xine:1_beta4:*:*:*:*:*:*:* Versions 1_beta4 Vulnerable ·Xine
  • cpe:2.3:a:xine:xine:1_beta5:*:*:*:*:*:*:* Versions 1_beta5 Vulnerable ·Xine
  • cpe:2.3:a:xine:xine:1_beta6:*:*:*:*:*:*:* Versions 1_beta6 Vulnerable ·Xine
  • cpe:2.3:a:xine:xine:1_beta7:*:*:*:*:*:*:* Versions 1_beta7 Vulnerable ·Xine
  • cpe:2.3:a:xine:xine:1_beta8:*:*:*:*:*:*:* Versions 1_beta8 Vulnerable ·Xine
  • cpe:2.3:a:xine:xine:1_beta9:*:*:*:*:*:*:* Versions 1_beta9 Vulnerable ·Xine
  • cpe:2.3:a:xine:xine:1_beta10:*:*:*:*:*:*:* Versions 1_beta10 Vulnerable ·Xine
  • cpe:2.3:a:xine:xine:1_beta11:*:*:*:*:*:*:* Versions 1_beta11 Vulnerable ·Xine
  • cpe:2.3:a:xine:xine:1_beta12:*:*:*:*:*:*:* Versions 1_beta12 Vulnerable ·Xine
  • cpe:2.3:a:xine:xine:1_rc0:*:*:*:*:*:*:* Versions 1_rc0 Vulnerable ·Xine
  • cpe:2.3:a:xine:xine:1_rc0a:*:*:*:*:*:*:* Versions 1_rc0a Vulnerable ·Xine
  • cpe:2.3:a:xine:xine:1_rc1:*:*:*:*:*:*:* Versions 1_rc1 Vulnerable ·Xine
  • cpe:2.3:a:xine:xine:1_rc2:*:*:*:*:*:*:* Versions 1_rc2 Vulnerable ·Xine
  • cpe:2.3:a:xine:xine:1_rc3:*:*:*:*:*:*:* Versions 1_rc3 Vulnerable ·Xine
  • cpe:2.3:a:xine:xine:1_rc3a:*:*:*:*:*:*:* Versions 1_rc3a Vulnerable ·Xine
  • cpe:2.3:a:xine:xine:1_rc3b:*:*:*:*:*:*:* Versions 1_rc3b Vulnerable ·Xine
  • cpe:2.3:a:xine:xine:1_rc4:*:*:*:*:*:*:* Versions 1_rc4 Vulnerable ·Xine
  • cpe:2.3:a:xine:xine:1_rc5:*:*:*:*:*:*:* Versions 1_rc5 Vulnerable ·Xine
  • cpe:2.3:a:xine:xine:1_rc6:*:*:*:*:*:*:* Versions 1_rc6 Vulnerable ·Xine
  • cpe:2.3:a:xine:xine:1_rc6a:*:*:*:*:*:*:* Versions 1_rc6a Vulnerable ·Xine
  • cpe:2.3:a:xine:xine:1_rc7:*:*:*:*:*:*:* Versions 1_rc7 Vulnerable ·Xine
  • cpe:2.3:a:xine:xine:1_rc8:*:*:*:*:*:*:* Versions 1_rc8 Vulnerable ·Xine
  • cpe:2.3:a:xine:xine-lib:0.9.8:*:*:*:*:*:*:* Versions 0.9.8 Vulnerable ·Xine
  • cpe:2.3:a:xine:xine-lib:0.9.13:*:*:*:*:*:*:* Versions 0.9.13 Vulnerable ·Xine
  • cpe:2.3:a:xine:xine-lib:0.99:*:*:*:*:*:*:* Versions 0.99 Vulnerable ·Xine
  • cpe:2.3:a:xine:xine-lib:1_alpha:*:*:*:*:*:*:* Versions 1_alpha Vulnerable ·Xine
  • cpe:2.3:a:xine:xine-lib:1_beta1:*:*:*:*:*:*:* Versions 1_beta1 Vulnerable ·Xine
  • cpe:2.3:a:xine:xine-lib:1_beta2:*:*:*:*:*:*:* Versions 1_beta2 Vulnerable ·Xine
  • cpe:2.3:a:xine:xine-lib:1_beta3:*:*:*:*:*:*:* Versions 1_beta3 Vulnerable ·Xine
  • cpe:2.3:a:xine:xine-lib:1_beta4:*:*:*:*:*:*:* Versions 1_beta4 Vulnerable ·Xine
  • cpe:2.3:a:xine:xine-lib:1_beta5:*:*:*:*:*:*:* Versions 1_beta5 Vulnerable ·Xine
  • cpe:2.3:a:xine:xine-lib:1_beta6:*:*:*:*:*:*:* Versions 1_beta6 Vulnerable ·Xine
  • cpe:2.3:a:xine:xine-lib:1_beta7:*:*:*:*:*:*:* Versions 1_beta7 Vulnerable ·Xine
  • cpe:2.3:a:xine:xine-lib:1_beta8:*:*:*:*:*:*:* Versions 1_beta8 Vulnerable ·Xine
  • cpe:2.3:a:xine:xine-lib:1_beta9:*:*:*:*:*:*:* Versions 1_beta9 Vulnerable ·Xine
  • cpe:2.3:a:xine:xine-lib:1_beta10:*:*:*:*:*:*:* Versions 1_beta10 Vulnerable ·Xine
  • cpe:2.3:a:xine:xine-lib:1_beta11:*:*:*:*:*:*:* Versions 1_beta11 Vulnerable ·Xine
  • cpe:2.3:a:xine:xine-lib:1_beta12:*:*:*:*:*:*:* Versions 1_beta12 Vulnerable ·Xine
  • cpe:2.3:a:xine:xine-lib:1_rc0:*:*:*:*:*:*:* Versions 1_rc0 Vulnerable ·Xine
  • cpe:2.3:a:xine:xine-lib:1_rc1:*:*:*:*:*:*:* Versions 1_rc1 Vulnerable ·Xine
  • cpe:2.3:a:xine:xine-lib:1_rc2:*:*:*:*:*:*:* Versions 1_rc2 Vulnerable ·Xine
  • cpe:2.3:a:xine:xine-lib:1_rc3:*:*:*:*:*:*:* Versions 1_rc3 Vulnerable ·Xine
  • cpe:2.3:a:xine:xine-lib:1_rc3a:*:*:*:*:*:*:* Versions 1_rc3a Vulnerable ·Xine
  • cpe:2.3:a:xine:xine-lib:1_rc3b:*:*:*:*:*:*:* Versions 1_rc3b Vulnerable ·Xine
  • cpe:2.3:a:xine:xine-lib:1_rc3c:*:*:*:*:*:*:* Versions 1_rc3c Vulnerable ·Xine
  • cpe:2.3:a:xine:xine-lib:1_rc4:*:*:*:*:*:*:* Versions 1_rc4 Vulnerable ·Xine
  • cpe:2.3:a:xine:xine-lib:1_rc5:*:*:*:*:*:*:* Versions 1_rc5 Vulnerable ·Xine
  • cpe:2.3:a:xine:xine-lib:1_rc6:*:*:*:*:*:*:* Versions 1_rc6 Vulnerable ·Xine
  • cpe:2.3:a:xine:xine-lib:1_rc6a:*:*:*:*:*:*:* Versions 1_rc6a Vulnerable ·Xine
  • cpe:2.3:a:xine:xine-lib:1_rc7:*:*:*:*:*:*:* Versions 1_rc7 Vulnerable ·Xine
  • cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Mandrakesoft
  • cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:* Versions 10.0 Vulnerable ·Mandrakesoft
  • cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:*:*:*:*:*:* Versions 10.1 Vulnerable ·Mandrakesoft
  • cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:x86_64:*:*:*:*:* Versions 10.1 Vulnerable ·Mandrakesoft

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2004-1188
  2. 2026-10-03 Alias added: GHSA-4x57-68g7-9v3f

References

Sources