GCVE - cpe:2.3:a:mplayer:mplayer:head_cvs:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:mplayer:mplayer:head_cvs:*:*:*:*:*:*:*

part: a version: head_cvs update: *

Vendor	Mplayer (`2dc4d336-fe9f-5ce7-b3eb-ac1b501956b6`)
Product	Mplayer (`984c0e51-faa0-5bb6-879c-c491cf971634`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2004-1188`	vulnerable	2026-06-08 04:47:53.300778	Details available The pnm_get_chunk function in xine 0.99.2 and earlier, and other packages such as MPlayer that use the same code, does not properly verify that the chunk size is less than the PREAMBLE_SIZE, which causes a read operation with a negative length that leads to a buffer overflow via (1) RMF_TAG, (2) DATA_TAG, (3) PROP_TAG, (4) MDPR_TAG, and (5) CONT_TAG values, a different vulnerability than CVE-2004-1187. Published: 2004-12-22T05:00:00.000Z Updated: 2024-08-08T00:46:12.403Z Open on db.gcve.eu Reference links http://www.mplayerhq.hu/MPlayer/patches/pnm_fix_20041215.diff http://www.mandriva.com/security/advisories?name=MDKSA-2005:011 http://www.idefense.com/application/poi/display?id=177&type=vulnerabilities http://cvs.sourceforge.net/viewcvs.py/xine/xine-lib/src/input/pnm.c?r1=1.20&r2=1.21 https://exchange.xforce.ibmcloud.com/vulnerabilities/18638	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-1187`	vulnerable	2026-06-08 04:47:53.281225	Details available Heap-based buffer overflow in the pnm_get_chunk function for xine 0.99.2, and other packages such as MPlayer that use the same code, allows remote attackers to execute arbitrary code via long PNA_TAG values, a different vulnerability than CVE-2004-1188. Published: 2004-12-22T05:00:00.000Z Updated: 2024-08-08T00:46:11.375Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/18640 http://www.mplayerhq.hu/MPlayer/patches/pnm_fix_20041215.diff http://www.idefense.com/application/poi/display?id=176&type=vulnerabilities http://www.mandriva.com/security/advisories?name=MDKSA-2005:011 http://cvs.sourceforge.net/viewcvs.py/xine/xine-lib/src/input/pnm.c?r1=1.20&r2=1.21	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0659`	vulnerable	2026-06-08 04:47:50.763104	Details available Buffer overflow in TranslateFilename for common.c in MPlayer 1.0pre4 allows remote attackers to execute arbitrary code via a long file name. Published: 2004-07-13T04:00:00.000Z Updated: 2024-08-08T00:24:27.064Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/16532 http://www.gentoo.org/security/en/glsa/glsa-200408-01.xml http://www.securityfocus.com/bid/10615 http://marc.info/?l=bugtraq&m=108844316930791&w=2	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.