VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 18, 2004· Updated Jun 16, 2026

CVE-2004-0433

CVE-2004-0433

Description

Multiple buffer overflows in the Real-Time Streaming Protocol (RTSP) client for (1) MPlayer before 1.0pre4 and (2) xine lib (xine-lib) before 1-rc4, when playing Real RTSP (realrtsp) streams, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (a) long URLs, (b) long Real server responses, or (c) long Real Data Transport (RDT) packets.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

18
  • MPlayer/Mplayer2 versions
    cpe:2.3:a:mplayer:mplayer:1.0_pre3try2:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:mplayer:mplayer:1.0_pre3try2:*:*:*:*:*:*:*
    • (no CPE)range: <1.0pre4
  • Xine/Xine Lib16 versions
    cpe:2.3:a:xine:xine-lib:1_beta1:*:*:*:*:*:*:*+ 15 more
    • cpe:2.3:a:xine:xine-lib:1_beta1:*:*:*:*:*:*:*
    • cpe:2.3:a:xine:xine-lib:1_beta10:*:*:*:*:*:*:*
    • cpe:2.3:a:xine:xine-lib:1_beta11:*:*:*:*:*:*:*
    • cpe:2.3:a:xine:xine-lib:1_beta2:*:*:*:*:*:*:*
    • cpe:2.3:a:xine:xine-lib:1_beta3:*:*:*:*:*:*:*
    • cpe:2.3:a:xine:xine-lib:1_beta4:*:*:*:*:*:*:*
    • cpe:2.3:a:xine:xine-lib:1_beta5:*:*:*:*:*:*:*
    • cpe:2.3:a:xine:xine-lib:1_beta6:*:*:*:*:*:*:*
    • cpe:2.3:a:xine:xine-lib:1_beta7:*:*:*:*:*:*:*
    • cpe:2.3:a:xine:xine-lib:1_beta8:*:*:*:*:*:*:*
    • cpe:2.3:a:xine:xine-lib:1_beta9:*:*:*:*:*:*:*
    • cpe:2.3:a:xine:xine-lib:1_rc2:*:*:*:*:*:*:*
    • cpe:2.3:a:xine:xine-lib:1_rc3a:*:*:*:*:*:*:*
    • cpe:2.3:a:xine:xine-lib:1_rc3b:*:*:*:*:*:*:*
    • cpe:2.3:a:xine:xine-lib:1_rc3c:*:*:*:*:*:*:*
    • (no CPE)range: <1-rc4

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.