Back to Database
Status published
High
CVE-2005-1195
Multiple heap-based buffer overflows in the code used to handle...
Vulnerability Description
Multiple heap-based buffer overflows in the code used to handle (1) MMS over TCP (MMST) streams or (2) RealMedia RTSP streams in xine-lib before 1.0, and other products that use xine-lib such as MPlayer 1.0pre6 and earlier, allow remote malicious servers to execute arbitrary code.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-1195
Credits & Attribution
No credits recorded in the NVD database.
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20175
- http://cvs.sourceforge.net/viewcvs.py/xine/xine-lib/src/input/mms.c?r1=1.55&r2=1.56&diff_format=u
- http://www.securityfocus.com/bid/13271
- http://www.gentoo.org/security/en/glsa/glsa-200504-19.xml
- http://www.mplayerhq.hu/homepage/design7/news.html#vuln11
- http://securitytracker.com/id?1013771
- http://www.osvdb.org/15712
- http://secunia.com/advisories/15014
- http://www.mplayerhq.hu/homepage/design7/news.html#vuln10
- http://seclists.org/lists/bugtraq/2005/Apr/0337.html
- http://cvs.sourceforge.net/viewcvs.py/xine/xine-lib/src/input/librtsp/rtsp.c?r1=1.18&r2=1.19&diff_format=u
- http://www.securityfocus.com/archive/1/396703
- http://www.osvdb.org/15711
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20171
More from mplayer
View All →CVE-2008-5616
Stack-based buffer overflow in the demux_open_vqf function in libmpdemux/demux_vqf.c in...
Critical
10
CVE-2008-4610
MPlayer allows remote attackers to cause a denial of service...
Medium
5
CVE-2008-3827
Multiple integer underflows in the Real demuxer (demux_real.c) in MPlayer...
Critical
9.3
CVE-2008-1558
Uncontrolled array index in the sdpplin_parse function in stream/realrtsp/sdpplin.c in...
Critical
10
CVE-2008-0630
Buffer overflow in url.c in MPlayer 1.0rc2 and SVN before...
Medium
6.8
Affected Vendor
mplayer
View all reports →Affected Software
mplayer, xine-lib
Vulnerable Versions:
0, 1_beta1, 1_beta2, 1_beta3, 1_beta4, 1_beta5, 1_beta6, 1_beta7, 1_beta8, 1_beta9, 1_beta10, 1_beta11, 1_rc2, 1_rc3a, 1_rc3b, 1_rc3c
Timeline
Official Publish:
April 21st, 2005
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.