Vulnerability Spotlight: Live Networks LIVE555 streaming media RTSPServer code execution vulnerability

These vulnerabilities were discovered by Lilith Wyatt of Cisco Talos. Cisco Talos is disclosing a code execution vulnerability that has been identified in Live Networks LIVE555 streaming media RTSPServer. LIVE555 Streaming Media is a set of open-source C++ libraries developed by Live Networks Inc...

CVE-2011-10008

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/mplayerm3ubof.rb 2025-10-23 21:12:56+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7 2026-09-08 06:51:27+00:00| seen|...

mpv: Remote code execution

Background Video player based on MPlayer/mplayer2 Description A vulnerability was discovered in mpv with the handling of HTML documents containing VIDEO elements. Additionally, mpv accepts arbitrary URLs in a src attribute without a protocol whitelist in player/lua/ytdlhook.lua. Impact A remote...

CVE-2016-5115

The avcodecdecodeaudio4 function in libavcodec in libavformat 57.34.103, as used in MPlayer, allows remote attackers to cause a denial of service out-of-bounds read via a crafted mp3 file...

CVE-2016-4352

Integer overflow in the demuxer function in libmpdemux/demuxgif.c in Mplayer allows remote attackers to cause a denial of service crash via large dimensions in a gif file...

Integer overflow

Integer overflow in the demuxer function in libmpdemux/demuxgif.c in Mplayer allows remote attackers to cause a denial of service crash via large dimensions in a gif file...

CVE-2016-5115

The avcodecdecodeaudio4 function in libavcodec in libavformat 57.34.103, as used in MPlayer, allows remote attackers to cause a denial of service out-of-bounds read via a crafted mp3 file...

CVE-2016-4352

Integer overflow in the demuxer function in libmpdemux/demuxgif.c in Mplayer allows remote attackers to cause a denial of service crash via large dimensions in a gif file...

UBUNTU-CVE-2016-4352

Integer overflow in the demuxer function in libmpdemux/demuxgif.c in Mplayer allows remote attackers to cause a denial of service crash via large dimensions in a gif file...

DEBIAN-CVE-2016-4352

Integer overflow in the demuxer function in libmpdemux/demuxgif.c in Mplayer allows remote attackers to cause a denial of service crash via large dimensions in a gif file...

CVE-2016-4352

CVE-2016-4352 involves an integer overflow in the demuxer function libmpdemux/demux_gif.c in MPlayer. The vulnerability allows a remote attacker to cause a crash by providing a GIF with large width/height dimensions. Available connected documents confirm the same description across multiple sourc...

CVE-2016-5115

The avcodecdecodeaudio4 function in libavcodec in libavformat 57.34.103, as used in MPlayer, allows remote attackers to cause a denial of service out-of-bounds read via a crafted mp3 file...

CVE-2016-4352

Integer overflow in the demuxer function in libmpdemux/demuxgif.c in Mplayer allows remote attackers to cause a denial of service crash via large dimensions in a gif file...

PT-2017-8484

Name of the Vulnerable Software and Affected Versions Mplayer affected versions not specified Description The issue is related to an integer overflow in the demuxer function, specifically in the libmpdemux/demux gif.c component of Mplayer. This overflow can be triggered by remote attackers who...

CVE-2016-5115: Out-of-bounds Read

The avcodecdecodeaudio4 function in libavcodec in libavformat 57.34.103, as used in MPlayer, allows remote attackers to cause a denial of service out-of-bounds read via a crafted mp3 file...

CVE-2016-4352: Integer Overflow or Wraparound

Integer overflow in the demuxer function in libmpdemux/demuxgif.c in Mplayer allows remote attackers to cause a denial of service crash via large dimensions in a gif file...

MPlayer libavcodec component out-of-bounds read vulnerability

MPlayer is an open source multimedia player product developed by MPlayer team. libavcodec is one of the encoding and decoding library components. A security vulnerability exists in MPlayer's libavcodec component. An attacker can exploit this vulnerability to cause an out-of-bounds read with an mp...

mplayer: denial of service

A vulnerability has been discovered that is leading to a crash when playing a fuzzed gif file. The gif demuxes assumed in many places that widthheight is = INTMAX, however this was not always true and was leading to an integer overflow...

Debian DLA-457-1 : mplayer security update

Mplayer is crashing when playing a fuzzed gif file. The gif demuxes assumes in many places that widthheight is = INTMAX; this might not be true. Fixed by validating the picture size. NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security...

[SECURITY] [DLA 457-1] mplayer security update

Package : mplayer Version : 2:1.0rc4.dfsg1+svn34540-1+deb7u2 CVE ID : CVE-2016-4352 Mplayer is crashing when playing a fuzzed gif file. The gif demuxes assumes in many places that widthheight is = INTMAX; this might not be true. Fixed by validating the picture size...