CVE:CVE-2004-0433
CNNVD:CNNVD-200408-167
MPlayer 1.0pre4之前版本和(2) xine lib (xine-lib) 1-rc4之前版本中的Real-Time Streaming Protocol (RTSP)客户端存在多个缓冲区溢出漏洞。当使用Real RTSP (realrtsp)数据流时远程攻击者可以通过(a) 超长URLs， (b)超长 Real服务器响应，或者(c)超长Real Data Transport (RDT)数据包导致服务拒绝（崩溃）和可能执行任意代码。
solution:Upgrade mplayer mplayer to a higher version than 1.0_pre3try2,and avoid the version 1.0_pre3try2; Upgrade xine xine-lib to a higher version than 1_beta1,1_beta2,1_beta3,1_beta4,1_beta5,1_beta6,1_beta7,1_beta8,1_beta9,1_beta10,1_beta11,1_rc2,1_rc3a,1_rc3b,1_rc3c,and avoid the version 1_beta1,1_beta2,1_beta3,1_beta4,1_beta5,1_beta6,1_beta7,1_beta8,1_beta9,1_beta10,1_beta11,1_rc2,1_rc3a,1_rc3b,1_rc3c