CVE-2004-1455

Vulnerability

A stack-based buffer overflow exists in xine-lib versions 1_rc5-r2 and earlier, triggered through the vcd:// input source identifier management buffer. The vulnerability resides in the playlist parsing functionality; a crafted playlist containing an overly long vcd:// URL can overflow a stack buffer.

Exploitation

An attacker constructs a malicious playlist file (e.g., with an .asx extension but also potentially disguised as an MP3, AVI, or MPEG file using a valid header) that includes a vcd:// line with an excessively long path. The victim must open this playlist in a player built on xine-lib. No additional authentication or special network position is required; the attack can be conducted remotely if the attacker can deliver the playlist file (via email, web download, etc.) [1][2].

Impact

Successful exploitation allows arbitrary code execution with the privileges of the user running the player, leading to full compromise of the affected system: attacker gains control, ability to execute shellcode, and potential for further local or network-based actions [1][2].

Mitigation

The vulnerability is fixed in xine-lib version 1_rc5-r3 and later. Users should upgrade to at least that version. No known workaround exists for earlier versions [2].