Every CVESearch/Get API key

CVE-2004-1309

Heap-based buffer overflow in the demux_open_bmp function in demux_bmp.c for Unix MPlayer 1.0pre5...

10.0 HighFix available

CVE-2004-1309 is a high vulnerability (CVSS 10.0) in Mplayer Unix Mplayer, published December 22, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.18%, the 92nd percentile. Fixed in mplayer 1.0~pre6a-1.

What does this mean?
Severity
10.0 HighCVSS 2.0, NVD
Exploit chance
5.18%EPSS, 92nd percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
1.0~pre6a-1mplayer +2 more

Description

Heap-based buffer overflow in the demux_open_bmp function in demux_bmp.c for Unix MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a bitmap (BMP) file containing a large biClrUsed field.

Exploit likelihood

5.18%Down 1.3 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
mplayer
Debian:12
before 1.0~pre6a-1
1.0~pre6a-1
mplayer
Debian:13
before 1.0~pre6a-1
1.0~pre6a-1
mplayer
Debian:14
before 1.0~pre6a-1
1.0~pre6a-1

What each source reports

NVD Score used10.0

Heap-based buffer overflow in the demux_open_bmp function in demux_bmp.c for Unix MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a bitmap (BMP) file containing a large biClrUsed field.

Record
CVE-2004-1309
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Updated
2026-11-02
CVE ListNo score

Heap-based buffer overflow in the demux_open_bmp function in demux_bmp.c for Unix MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a bitmap (BMP) file containing a large biClrUsed field.

Record
CVE-2004-1309
Updated
2026-11-02
EUVDEUVD-2004-1306No score

Heap-based buffer overflow in the demux_open_bmp function in demux_bmp.c for Unix MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a bitmap (BMP) file containing a large biClrUsed field.

Record
EUVD-2004-1306
Updated
2026-11-03
GitHub AdvisoriesGHSA-xxfg-v7qr-vxwhNo score

Heap-based buffer overflow in the demux_open_bmp function in demux_bmp.c for Unix MPlayer 1.0pre5...

Heap-based buffer overflow in the demux_open_bmp function in demux_bmp.c for Unix MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a bitmap (BMP) file containing a large biClrUsed field.

Record
GHSA-xxfg-v7qr-vxwh
Updated
2026-11-02
OSVNo score

Heap-based buffer overflow in the demux_open_bmp function in demux_bmp.c for Unix MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a bitmap (BMP) file containing a large biClrUsed field.

Record
CVE-2004-1309
Updated
2026-11-02
OSVDEBIAN-CVE-2004-1309No score

Heap-based buffer overflow in the demux_open_bmp function in demux_bmp.c for Unix MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a bitmap (BMP) file containing a large biClrUsed field.

Record
DEBIAN-CVE-2004-1309
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open