Strix
26.1K

CVE-2004-0372

UnknownEPSS 0.34%

Last modified

CVE-2004-0372 is a vulnerability of currently unknown severity. xine allows local users to overwrite arbitrary files via a symlink attack on a bug report email that is generated by the (1) xine-bugreport or (2) xine-check scripts.. EPSS estimates a 0.34% chance of exploitation in the next 30 days.

Description

xine allows local users to overwrite arbitrary files via a symlink attack on a bug report email that is generated by the (1) xine-bugreport or (2) xine-check scripts.

Metrics

EPSS Probability
0.34%

26.1th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

VendorProductVersions
XineXine0.9.13
XineXine1_beta1
XineXine1_beta2
XineXine1_beta3
XineXine1_beta4
XineXine1_beta5
XineXine1_beta6
XineXine1_beta7
XineXine1_beta8
XineXine1_beta9
XineXine1_beta10
XineXine1_beta11
XineXine1_beta12
XineXine1_rc0a
XineXine1_rc1
XineXine1_rc2
XineXine1_rc3
XineXine1_rc3a
XineXine1_rc3b

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2004-0372?
xine allows local users to overwrite arbitrary files via a symlink attack on a bug report email that is generated by the (1) xine-bugreport or (2) xine-check scripts.
How severe is CVE-2004-0372?
Severity scoring for CVE-2004-0372 is pending analysis. The EPSS model estimates a 0.34% probability of exploitation in the next 30 days.
How do I fix CVE-2004-0372?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2004-0372?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST