iDEFENSE Security Advisory 12.16.04: MPlayer Remote RTSP HeapOverflow Vulnerability

MPlayer Remote RTSP Heap Overflow Vulnerability iDEFENSE Security Advisory 12.16.04 http://www.idefense.com/application/poi/display?id=166 December 16, 2004 I. BACKGROUND MPlayer is a movie player for Linux that also runs on many other Unices, and non- x86 CPUs. It plays most MPEG, VOB, AVI,...

MPlayer < 1.0pre5try2 Get_Header Remote Client-Side Buffer Overflow

Binary data 2458.prm...

MPlayer 0.91.0 - MMST Get_Header Remote Client-Side Buffer Overflow

MPlayer 0.91.0 - MMST GetHeader Remote Client-Side Buffer Overflow // source: https://www.securityfocus.com/bid/11962/info A remote, client-side buffer overflow vulnerability reportedly affects MPlayer. This issue is due to a failure of the application to properly validate the length of...

GLSA-200408-01 : MPlayer: GUI filename handling overflow

The remote host is affected by the vulnerability described in GLSA-200408-01 MPlayer: GUI filename handling overflow The MPlayer GUI code contains several buffer overflow vulnerabilities, and at least one in the TranslateFilename function is exploitable. Impact : By enticing a user to play a file...

MPlayer < 0.92.0 ASX Header Parsing Buffer Overflow

Binary data 1768.prm...

MPlayer 1.0pre4 GUI - Filename handling Overflow

/ c0ntex open-security org / include include include include include include include include include define SUCCESS 0 / True / define FAILURE 1 / False / define ABANNER "MPlayerMeMPlayerMediaMayhem" define ALIGN 0 / Stack address alignment / define BUFFER 544 / Exactly overwrite EIP / define EIPW...

MPlayer <= 1.0pre4 GUI filename handling Overflow Exploit

Exploit for linux platform in category remote exploits ========================================================= MPlayer include include include include include include include include define SUCCESS 0 / True / define FAILURE 1 / False / define ABANNER "MPlayerMeMPlayerMediaMayhem" define ALIGN 0...

MPlayer buffer overflow

Buffer overflow on oversized playlist file/URL entry...

MPlayer/xine buffer overflow

Buffer overflow on parsing RTSP protocol...

MPlayer buffer overflow

Buffer overflows during URL parsing...

Remote buffer overflow in MPlayer

Background Quote from http://mplayerhq.hu "MPlayer is a movie player for LINUX runs on many other Unices, and non-x86 CPUs, see the documentation. It plays most MPEG, VOB, AVI, OGG/OGM, VIVO, ASF/WMA/WMV, QT/MOV/MP4, FLI, RM, NuppelVideo, YUV4MPEG, FILM, RoQ, PVA files, supported by many native,...

CVE-2003-0835

Multiple buffer overflows in asfhttprequest of MPlayer before 0.92 allows remote attackers to execute arbitrary code via an ASX header with a long hostname...

MPlayer Security Advisory #01: Remotely exploitable buffer overflow

Severity: HIGH if playing ASX streaming content LOW if playing only normal files Description: A remotely exploitable buffer overflow vulnerability was found in MPlayer. A malicious host can craft a harmful ASX header, and trick MPlayer into executing arbitrary code upon parsing that header. MPlay...