Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
10.0

Zinf media player lets attackers run code via .pls file

CVE-2004-0964 · published 21 years ago
Summary

The Zinf player for Windows version 2.2.1 and older Linux versions can be tricked by a specially crafted .pls playlist file to run any program the attacker chooses. This could let a remote hacker or a local user take control of the computer. Upgrade Zinf to the latest release or refrain from opening .pls files from unknown sources.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
zinf zinf 2.2.1
cpe:2.3:a:zinf:zinf:2.2.1:*:*:*:*:*:*:*
debian debian_linux 3.0
cpe:2.3:o:debian:debian_linux:3.0:*:alpha:*:*:*:*:*
Original advisory text
Buffer overflow in Zinf 2.2.1 on Windows, and other older versions for Linux, allows remote attackers or local users to execute arbitrary code via certain values in a .pls file.
Buffer overflow in Zinf 2.2.1 on Windows, and other older versions for Linux, allows remote attackers or local users to execute arbitrary code via certain values in a .pls file.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
10.0 Critical
Exploitation
63% chance of attack within 30 days
Timeline
Published9 Feb 2005
Updated29 Sep 2026
First seen29 Sep 2026
Sources
CVE-2004-0964 · NVD
Track software like this
Free during beta