Django REST framework

Lookup for vulnerable packages by Package URL.

Purl pkg:ebuild/media-libs/xine-lib@1_rc5-r3

Type ebuild

Namespace media-libs

Name xine-lib

Version 1_rc5-r3

Qualifiers

Subpath

Is_vulnerable true

Next_non_vulnerable_version 0.9.23-r2

Latest_non_vulnerable_version 4.38.00

Affected_by_vulnerabilities

url VCID-dv6p-47uf-8ucb

vulnerability_id VCID-dv6p-47uf-8ucb

summary Stack-based buffer overflow in the VideoCD (VCD) code in xine-lib 1-rc2 through 1-rc5, as derived from libcdio, allows attackers to execute arbitrary code via a VideoCD with an unterminated disk label.

references

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2004-1476

reference_id

reference_type

scores

value	0.02053
scoring_system	epss
scoring_elements	0.84163
published_at	2026-05-29T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2004-1476

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1476
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1476

reference_url	https://security.gentoo.org/glsa/200409-30
reference_id	GLSA-200409-30
reference_type
scores
url	https://security.gentoo.org/glsa/200409-30

fixed_packages

url	pkg:ebuild/media-libs/xine-lib@1_rc6
purl	pkg:ebuild/media-libs/xine-lib@1_rc6
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:ebuild/media-libs/xine-lib@1_rc6

aliases CVE-2004-1476

risk_score null

exploitability null

weighted_severity null

resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dv6p-47uf-8ucb

url VCID-haah-f18w-23fk

vulnerability_id VCID-haah-f18w-23fk

summary xine-lib contains an exploitable buffer overflow in the VCD handling code

references

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2004-1475

reference_id

reference_type

scores

value	0.05483
scoring_system	epss
scoring_elements	0.90346
published_at	2026-05-29T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2004-1475

reference_url	https://security.gentoo.org/glsa/200408-18
reference_id	GLSA-200408-18
reference_type
scores
url	https://security.gentoo.org/glsa/200408-18

reference_url	https://security.gentoo.org/glsa/200409-30
reference_id	GLSA-200409-30
reference_type
scores
url	https://security.gentoo.org/glsa/200409-30

reference_url	https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/386.c
reference_id	OSVDB-10041;CVE-2004-1475
reference_type	exploit
scores
url	https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/386.c

fixed_packages

url	pkg:ebuild/media-libs/xine-lib@1_rc6
purl	pkg:ebuild/media-libs/xine-lib@1_rc6
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:ebuild/media-libs/xine-lib@1_rc6

aliases CVE-2004-1475

risk_score null

exploitability null

weighted_severity null

resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-haah-f18w-23fk

url VCID-vku1-z3ns-qqb5

vulnerability_id VCID-vku1-z3ns-qqb5

summary

xine-lib contains several vulnerabilities potentially allowing the
    execution of arbitrary code.

references

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2004-1379

reference_id

reference_type

scores

value	0.0354
scoring_system	epss
scoring_elements	0.87873
published_at	2026-05-29T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2004-1379

reference_url	https://security.gentoo.org/glsa/200409-30
reference_id	GLSA-200409-30
reference_type
scores
url	https://security.gentoo.org/glsa/200409-30

fixed_packages

url	pkg:ebuild/media-libs/xine-lib@1_rc6
purl	pkg:ebuild/media-libs/xine-lib@1_rc6
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:ebuild/media-libs/xine-lib@1_rc6

aliases CVE-2004-1379

risk_score null

exploitability null

weighted_severity null

resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vku1-z3ns-qqb5

Fixing_vulnerabilities

url VCID-haah-f18w-23fk

vulnerability_id VCID-haah-f18w-23fk

summary xine-lib contains an exploitable buffer overflow in the VCD handling code

references

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2004-1475

reference_id

reference_type

scores

value	0.05483
scoring_system	epss
scoring_elements	0.90346
published_at	2026-05-29T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2004-1475

reference_url	https://security.gentoo.org/glsa/200408-18
reference_id	GLSA-200408-18
reference_type
scores
url	https://security.gentoo.org/glsa/200408-18

reference_url	https://security.gentoo.org/glsa/200409-30
reference_id	GLSA-200409-30
reference_type
scores
url	https://security.gentoo.org/glsa/200409-30

reference_url	https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/386.c
reference_id	OSVDB-10041;CVE-2004-1475
reference_type	exploit
scores
url	https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/386.c

fixed_packages

url pkg:ebuild/media-libs/xine-lib@1_rc5-r3

purl pkg:ebuild/media-libs/xine-lib@1_rc5-r3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-dv6p-47uf-8ucb

vulnerability	VCID-haah-f18w-23fk

vulnerability	VCID-vku1-z3ns-qqb5

resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/media-libs/xine-lib@1_rc5-r3

url	pkg:ebuild/media-libs/xine-lib@1_rc6
purl	pkg:ebuild/media-libs/xine-lib@1_rc6
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:ebuild/media-libs/xine-lib@1_rc6

aliases CVE-2004-1475

risk_score null

exploitability null

weighted_severity null

resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-haah-f18w-23fk

Risk_score null

Resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/media-libs/xine-lib@1_rc5-r3

Package Instance