CVE-2004-0433: Mplayer

High severity, CVSS 10.0. EPSS: 5.1% chance of exploitation in the next 30 days.

Multiple buffer overflows in the Real-Time Streaming Protocol (RTSP) client for (1) MPlayer before 1.0pre4 and (2) xine lib (xine-lib) before 1-rc4, when playing Real RTSP (realrtsp) streams, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (a) long URLs, (b) long Real server responses, or (c) long Real Data Transport (RDT) packets.

Affected products

• Mplayer Mplayer: version 1.0_pre3try2 only
• Xine Xine-Lib: version 1_beta1 only; version 1_beta2 only; version 1_beta3 only; version 1_beta4 only; version 1_beta5 only; version 1_beta6 only; …

Published 2004-08-18. Last modified 2026-06-16.