Multiple buffer overflows in the Real-Time Streaming Protocol (RTSP) client for (1) MPlayer before 1.0pre4 and (2) xine lib (xine-lib) before 1-rc4, when playing Real RTSP (realrtsp) streams, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (a) long URLs, (b) long Real server responses, or (c) long Real Data Transport (RDT) packets.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade mplayer | Jul 30, 2024 | Aug 18, 2004 |
| Freebsd | — | Upgrade libxineUpgrade mplayer-esoundUpgrade mplayer-gtk2-esoundUpgrade mplayerUpgrade mplayer-gtkUpgrade mplayer-gtk2Upgrade mplayer-gtk-esound | Dec 10, 2025 | Jan 12, 2005 |
| Gentoo Linux | — | Upgrade media-video/mplayer.Upgrade media-libs/xine-lib. | Oct 30, 2017 | Aug 18, 2004 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub