VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 10, 2005· Updated Jun 16, 2026

CVE-2004-1309

CVE-2004-1309

Description

Heap-based buffer overflow in the demux_open_bmp function in demux_bmp.c for Unix MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a bitmap (BMP) file containing a large biClrUsed field.

Affected products

2
  • MPlayer/Mplayer2 versions
    cpe:2.3:a:mplayer:unix_mplayer:1.0_pre5:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:mplayer:unix_mplayer:1.0_pre5:*:*:*:*:*:*:*
    • (no CPE)range: =1.0pre5

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.