VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Aug 18, 2004· Updated Apr 16, 2026

CVE-2004-0433

CVE-2004-0433

Description

Multiple buffer overflows in the Real-Time Streaming Protocol (RTSP) client for (1) MPlayer before 1.0pre4 and (2) xine lib (xine-lib) before 1-rc4, when playing Real RTSP (realrtsp) streams, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (a) long URLs, (b) long Real server responses, or (c) long Real Data Transport (RDT) packets.

Affected products

16
  • MPlayer/Mplayer
    cpe:2.3:a:mplayer:mplayer:1.0_pre3try2:*:*:*:*:*:*:*
  • Xine/Xine Lib15 versions
    cpe:2.3:a:xine:xine-lib:1_beta1:*:*:*:*:*:*:*+ 14 more
    • cpe:2.3:a:xine:xine-lib:1_beta1:*:*:*:*:*:*:*
    • cpe:2.3:a:xine:xine-lib:1_beta2:*:*:*:*:*:*:*
    • cpe:2.3:a:xine:xine-lib:1_beta3:*:*:*:*:*:*:*
    • cpe:2.3:a:xine:xine-lib:1_beta4:*:*:*:*:*:*:*
    • cpe:2.3:a:xine:xine-lib:1_beta5:*:*:*:*:*:*:*
    • cpe:2.3:a:xine:xine-lib:1_beta6:*:*:*:*:*:*:*
    • cpe:2.3:a:xine:xine-lib:1_beta7:*:*:*:*:*:*:*
    • cpe:2.3:a:xine:xine-lib:1_beta8:*:*:*:*:*:*:*
    • cpe:2.3:a:xine:xine-lib:1_beta9:*:*:*:*:*:*:*
    • cpe:2.3:a:xine:xine-lib:1_beta10:*:*:*:*:*:*:*
    • cpe:2.3:a:xine:xine-lib:1_beta11:*:*:*:*:*:*:*
    • cpe:2.3:a:xine:xine-lib:1_rc2:*:*:*:*:*:*:*
    • cpe:2.3:a:xine:xine-lib:1_rc3a:*:*:*:*:*:*:*
    • cpe:2.3:a:xine:xine-lib:1_rc3b:*:*:*:*:*:*:*
    • cpe:2.3:a:xine:xine-lib:1_rc3c:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.