Search for vulnerabilities
| Vulnerability ID | VCID-ff91-hyy8-nqc3 |
| Aliases |
CVE-2004-1187
|
| Summary | Heap-based buffer overflow in the pnm_get_chunk function for xine 0.99.2, and other packages such as MPlayer that use the same code, allows remote attackers to execute arbitrary code via long PNA_TAG values, a different vulnerability than CVE-2004-1188. |
| Status | Published |
| Exploitability | None |
| Weighted Severity | None |
| Risk | None |
| Affected and Fixed Packages | Package Details |
| There are no known CWE. |
| System | Score | Found at |
|---|---|---|
| epss | 0.05704 | https://api.first.org/data/v1/epss?cve=CVE-2004-1187 |
| epss | 0.05704 | https://api.first.org/data/v1/epss?cve=CVE-2004-1187 |
| epss | 0.05704 | https://api.first.org/data/v1/epss?cve=CVE-2004-1187 |
| epss | 0.05704 | https://api.first.org/data/v1/epss?cve=CVE-2004-1187 |
| epss | 0.05704 | https://api.first.org/data/v1/epss?cve=CVE-2004-1187 |
| epss | 0.05704 | https://api.first.org/data/v1/epss?cve=CVE-2004-1187 |
| epss | 0.05704 | https://api.first.org/data/v1/epss?cve=CVE-2004-1187 |
| epss | 0.05704 | https://api.first.org/data/v1/epss?cve=CVE-2004-1187 |
| epss | 0.05704 | https://api.first.org/data/v1/epss?cve=CVE-2004-1187 |
| epss | 0.05704 | https://api.first.org/data/v1/epss?cve=CVE-2004-1187 |
| epss | 0.05704 | https://api.first.org/data/v1/epss?cve=CVE-2004-1187 |
| epss | 0.05704 | https://api.first.org/data/v1/epss?cve=CVE-2004-1187 |
| epss | 0.05704 | https://api.first.org/data/v1/epss?cve=CVE-2004-1187 |
| cvssv2 | 10.0 | https://nvd.nist.gov/vuln/detail/CVE-2004-1187 |
| Exploitability (E) | Access Vector (AV) | Access Complexity (AC) | Authentication (Au) | Confidentiality Impact (C) | Integrity Impact (I) | Availability Impact (A) |
|---|---|---|---|---|---|---|
high functional unproven proof_of_concept not_defined |
local adjacent_network network |
high medium low |
multiple single none |
none partial complete |
none partial complete |
none partial complete |
| Percentile | 0.90379 |
| EPSS Score | 0.05704 |
| Published At | April 1, 2026, 12:55 p.m. |
| Date | Actor | Action | Source | VulnerableCode Version |
|---|---|---|---|---|
| 2026-04-01T17:26:13.502891+00:00 | NVD Importer | Import | https://nvd.nist.gov/vuln/detail/CVE-2004-1187 | 38.0.0 |