CVE-2004-1188: The pnm_get_chunk function in xine 0.99.2 and earlier, and other packages such as MPlayer that use the same...

Security readout for executives and security teams

This is an old media-parsing flaw. A malicious Real/PNM media file or stream could trigger a buffer overflow in xine 0.99.2 or earlier, and in other software that reused the same code, including MPlayer. Business urgency is mainly for legacy systems that still open untrusted media. Exposure is most likely on legacy desktops, media-processing hosts, appliances, or archived software images containing xine-lib, xine 0.99.2 or earlier, MPlayer, or copied PNM handler code. Current exposure cannot be inferred without inventory because the source bundle lists generic affected products poorly. Prioritize if the organization retains legacy Linux desktops, media conversion pipelines, or embedded systems handling outside media files. For modern standard builds, treat as a targeted legacy cleanup item rather than an emergency, because active exploitation is not evidenced in the supplied sources. Mitigation focus: Inventory systems for xine 0.99.2 or earlier and MPlayer builds using vulnerable PNM code.; Apply vendor or distribution updates that include the referenced PNM handler fix.; Disable vulnerable media handlers where legacy software cannot be updated promptly..

Prepared

Jun 30, 2026, 01:53 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.