Lucene search

K
freebsdFreeBSD7C5BD5B8-D652-11DD-A765-0030843D3802
HistoryDec 14, 2008 - 12:00 a.m.

mplayer -- twinvq processing buffer overflow vulnerability

2008-12-1400:00:00
vuxml.freebsd.org
10

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.179 Low

EPSS

Percentile

96.2%

A trapkit reports:

MPlayer contains a stack buffer overflow vulnerability while
parsing malformed TwinVQ media files. The vulnerability may be
exploited by a (remote) attacker to execute arbitrary code in
the context of MPlayer.

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.179 Low

EPSS

Percentile

96.2%