CVE-2004-1309
Heap-based buffer overflow in the demux_open_bmp function in demux_bmp.c for Unix MPlayer 1.0pre5...
Heap-based buffer overflow in the demux_open_bmp function in demux_bmp.c for Unix MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a bitmap (BMP) file containing a large biClrUsed field.
Exploit likelihood
What each source reports
NVD Score used
Heap-based buffer overflow in the demux_open_bmp function in demux_bmp.c for Unix MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a bitmap (BMP) file containing a large biClrUsed field.
- Record
CVE-2004-1309- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Heap-based buffer overflow in the demux_open_bmp function in demux_bmp.c for Unix MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a bitmap (BMP) file containing a large biClrUsed field.
- Record
CVE-2004-1309- Updated
- 2026-11-02
EUVDEUVD-2004-1306 No score
Heap-based buffer overflow in the demux_open_bmp function in demux_bmp.c for Unix MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a bitmap (BMP) file containing a large biClrUsed field.
- Record
EUVD-2004-1306- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xxfg-v7qr-vxwh No score
Heap-based buffer overflow in the demux_open_bmp function in demux_bmp.c for Unix MPlayer 1.0pre5...
Heap-based buffer overflow in the demux_open_bmp function in demux_bmp.c for Unix MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a bitmap (BMP) file containing a large biClrUsed field.
- Record
GHSA-xxfg-v7qr-vxwh- Updated
- 2026-11-02
OSV No score
Heap-based buffer overflow in the demux_open_bmp function in demux_bmp.c for Unix MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a bitmap (BMP) file containing a large biClrUsed field.
- Record
CVE-2004-1309- Updated
- 2026-11-02
OSVDEBIAN-CVE-2004-1309 No score
Heap-based buffer overflow in the demux_open_bmp function in demux_bmp.c for Unix MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a bitmap (BMP) file containing a large biClrUsed field.
- Record
DEBIAN-CVE-2004-1309- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-1309 is a high vulnerability (CVSS 10.0) in Mplayer Unix Mplayer, published December 22, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.18%, the 92nd percentile. Fixed in mplayer 1.0~pre6a-1.
References
www1.mplayerhq.hu/MPlayer/releases/ChangeLog
idefense.com/application/poi/display?id=168
exchange.xforce.ibmcloud.com/vulnerabilities/18527
mandriva.com/security/advisories?name=MDKSA-2004:157
nvd.nist.gov/vuln/detail/CVE-2004-1309
github.com/advisories/GHSA-xxfg-v7qr-vxwh
security-tracker.debian.org/tracker/CVE-2004-1309