CVE-2004-1188

CVE-2004-1188 is a critical buffer overflow vulnerability affecting xine 0.99.2 and earlier, as well as other software like MPlayer that utilize the same vulnerable code. The flaw stems from improper chunk size verification in the pnm_get_chunk function, leading to read operations with negative lengths when processing specific RMF tags. With a CVSS score of 10.0, this vulnerability is easily exploitable over the network with low attack complexity, allowing for complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation, no public exploit code, and it is not listed in CISA's KEV catalog, the vulnerability has garnered significant community discussion, indicating awareness among security researchers.