CVE-2004-1379: Xine

High severity, CVSS 7.5. EPSS: 4% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the DVD subpicture decoder in xine xine-lib 1-rc5 and earlier allows remote attackers to execute arbitrary code via a (1) DVD or (2) MPEG subpicture header where the second field reuses RLE data from the end of the first field.

Affected products

• Xine Xine: version 1_alpha only; version 1_beta1 only; version 1_beta2 only; version 1_beta3 only; version 1_beta4 only; version 1_beta5 only; …
• Xine Xine-Lib: version 0.9.8 only; version 1_beta2 only; version 1_beta3 only; version 1_beta4 only; version 1_beta5 only; version 1_beta6 only; …

Published 2004-09-16. Last modified 2026-06-16.