CVE-2008-3827

2008-09-2919:25:00

CWE-189

[email protected]

web.nvd.nist.gov

cve-2008-3827

integer underflows

real demuxer

mplayer

denial of service

arbitrary code

nvd

7.5 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.06 Low

EPSS

Percentile

93.5%

JSON

Multiple integer underflows in the Real demuxer (demux_real.c) in MPlayer 1.0_rc2 and earlier allow remote attackers to cause a denial of service (process termination) and possibly execute arbitrary code via a crafted video file that causes the stream_read function to read or write arbitrary memory.

CPENameOperatorVersion
mplayer:mplayermplayereq0.92
mplayer:mplayermplayereq1.0_pre2
mplayer:mplayermplayereq0.90
mplayer:mplayermplayereq1.0_pre1
mplayer:mplayermplayereq0.90_rc
mplayer:mplayermplayereq1.0_pre5try2
mplayer:mplayermplayereq1.0_rc1
mplayer:mplayermplayereq0.92.1
mplayer:mplayermplayereq1.0_pre3
mplayer:mplayermplayereq1.0_pre7try2

CPE	Name	Operator	Version
mplayer:mplayer	mplayer	eq	0.92
mplayer:mplayer	mplayer	eq	1.0_pre2
mplayer:mplayer	mplayer	eq	0.90
mplayer:mplayer	mplayer	eq	1.0_pre1
mplayer:mplayer	mplayer	eq	0.90_rc
mplayer:mplayer	mplayer	eq	1.0_pre5try2
mplayer:mplayer	mplayer	eq	1.0_rc1
mplayer:mplayer	mplayer	eq	0.92.1
mplayer:mplayer	mplayer	eq	1.0_pre3
mplayer:mplayer	mplayer	eq	1.0_pre7try2