CVE-2004-1379

Heap-based buffer overflow in the DVD subpicture decoder in xine xine-lib 1-rc5 and earlier allows remote attackers to execute arbitrary code via a (1) DVD or (2) MPEG subpicture header where the second field reuses RLE data from the end of the first field.

• http://slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.320308Patch
• http://www.debian.org/security/2005/dsa-657Patch, Vendor Advisory
• http://www.gentoo.org/security/en/glsa/glsa-200409-30.xmlPatch
• http://www.securityfocus.com/archive/1/375482/2004-09-02/2004-09-08/0
• http://www.securityfocus.com/bid/11205Patch
• http://www.vuxml.org/freebsd/131bd7c4-64a3-11d9-829a-000a95bc6fae.html
• http://xinehq.de/index.php/security/XSA-2004-5Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17423
• http://slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.320308Patch
• http://www.debian.org/security/2005/dsa-657Patch, Vendor Advisory
• http://www.gentoo.org/security/en/glsa/glsa-200409-30.xmlPatch
• http://www.securityfocus.com/archive/1/375482/2004-09-02/2004-09-08/0
• http://www.securityfocus.com/bid/11205Patch
• http://www.vuxml.org/freebsd/131bd7c4-64a3-11d9-829a-000a95bc6fae.html
• http://xinehq.de/index.php/security/XSA-2004-5Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17423

Published

Sep 16, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-1373Format string vulnerability in SHOUTcast 1.9.4 allows remote…
• CVE-2004-1374Multiple buffer overflows in NetBSD kernel may allow local u…
• CVE-2004-1375Unknown vulnerability in System Administration Manager (SAM)…
• CVE-2004-1376Directory traversal vulnerability in Microsoft Internet Expl…
• CVE-2004-1377The (1) fixps (aka fixps.in) and (2) psmandup (aka psmandup.…
• CVE-2004-1378The expat XML parser code, as used in the open source Jabber…
• CVE-2004-1380Firefox before 1.0 and Mozilla before 1.7.5 allows inactive …
• CVE-2004-1381Firefox before 1.0 and Mozilla before 1.7.5 allow inactive (…
• CVE-2004-1382The glibcbug script in glibc 2.3.4 and earlier allows local …
• CVE-2004-1383Multiple SQL injection vulnerabilities in phpGroupWare 0.9.1…
• CVE-2004-1384Multiple cross-site scripting (XSS) vulnerabilities in phpGr…
• CVE-2004-1385phpGroupWare 0.9.16.003 and earlier allows remote attackers …