mplayer - arbitrary code execution

Several buffer overflows have been discovered in the MPlayer movie player,
which might lead to the execution of arbitrary code. The Common
Vulnerabilities and Exposures project identifies the following problems:

• CVE-2008-0485
  Felipe Manzano and Anibal Sacco discovered a buffer overflow in
  the demuxer for MOV files.
• CVE-2008-0486
  Reimar Doeffinger discovered a buffer overflow in the FLAC header
  parsing.
• CVE-2008-0629
  Adam Bozanich discovered a buffer overflow in the CDDB access code.
• CVE-2008-0630
  Adam Bozanich discovered a buffer overflow in URL parsing.

The old stable distribution (sarge) doesn’t contain mplayer.

For the stable distribution (etch), these problems have been fixed in
version 1.0~rc1-12etch2.

We recommend that you upgrade your mplayer packages.