Lucene search

K
nvd[email protected]NVD:CVE-2008-3827
HistorySep 29, 2008 - 7:25 p.m.

CVE-2008-3827

2008-09-2919:25:59
CWE-189
web.nvd.nist.gov
1

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

High

0.06 Low

EPSS

Percentile

93.5%

Multiple integer underflows in the Real demuxer (demux_real.c) in MPlayer 1.0_rc2 and earlier allow remote attackers to cause a denial of service (process termination) and possibly execute arbitrary code via a crafted video file that causes the stream_read function to read or write arbitrary memory.

Affected configurations

NVD
Node
mplayermplayerRange1.0_rc2
OR
mplayermplayerMatch0.90
OR
mplayermplayerMatch0.90_pre
OR
mplayermplayerMatch0.90_rc
OR
mplayermplayerMatch0.90_rc4
OR
mplayermplayerMatch0.91
OR
mplayermplayerMatch0.92
OR
mplayermplayerMatch0.92.1
OR
mplayermplayerMatch0.92_cvs
OR
mplayermplayerMatch1.0_pre1
OR
mplayermplayerMatch1.0_pre2
OR
mplayermplayerMatch1.0_pre3
OR
mplayermplayerMatch1.0_pre3try2
OR
mplayermplayerMatch1.0_pre4
OR
mplayermplayerMatch1.0_pre5
OR
mplayermplayerMatch1.0_pre5try1
OR
mplayermplayerMatch1.0_pre5try2
OR
mplayermplayerMatch1.0_pre6
OR
mplayermplayerMatch1.0_pre7
OR
mplayermplayerMatch1.0_pre7try2
OR
mplayermplayerMatch1.0_rc1

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

High

0.06 Low

EPSS

Percentile

93.5%