CVE-2004-1379: Heap-based buffer overflow in the DVD subpicture decoder in xine xine-lib 1-rc5 and earlier allows remote a...

Security readout for executives and security teams

A crafted DVD or MPEG media file can trigger a heap overflow in xine-lib's DVD subpicture decoder. On vulnerable xine-lib 1-rc5 and earlier, this could let an attacker run code when a user or system processes malicious media. Exposure is most likely in legacy Linux or BSD systems, media players, kiosks, or automated media-processing workflows that still use xine-lib 1-rc5 or earlier. The supplied affected metadata lacks CPEs and lists vendor/product as n/a, so inventory validation is required. Prioritize remediation where xine-lib processes untrusted media or runs in shared environments. The flaw is old, but arbitrary code execution from media parsing can still matter in legacy systems and embedded workflows. Mitigation focus: Identify and retire xine-lib 1-rc5 or earlier installations.; Check xine and distribution advisories for fixed package versions.; Avoid processing untrusted DVD or MPEG media on vulnerable systems..

Prepared

Jun 30, 2026, 01:38 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.