MPlayer demux_audio.c远程栈溢出漏洞

BUGTRAQ ID: 27441 CVECAN ID: CVE-2008-0486 MPlayer是一款基于Linux的媒体播放程序，支持多种媒体格式。 MPlayer的libmpdemux/demuxaudio.c文件在解析FLAC标注时存在栈溢出漏洞： /----------- libmpdemux/demuxaudio.c 206 case FLACVORBISCOMMENT: 207 208 / For a description of the format please have a look at / 209 /...

[SECURITY] [DSA 1496-1] New mplayer packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1496-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 12, 2008 http://www.debian.org/security/faq -...

DSA-1496-1 mplayer - arbitrary code execution

Bulletin has no description...

DEBIAN-CVE-2008-0629

Buffer overflow in streamcddb.c in MPlayer 1.0rc2 and SVN before r25824 allows remote user-assisted attackers to execute arbitrary code via a CDDB database entry containing a long album title...

CVE-2008-0629

Buffer overflow in streamcddb.c in MPlayer 1.0rc2 and SVN before r25824 allows remote user-assisted attackers to execute arbitrary code via a CDDB database entry containing a long album title...

Buffer overflow

Buffer overflow in streamcddb.c in MPlayer 1.0rc2 and SVN before r25824 allows remote user-assisted attackers to execute arbitrary code via a CDDB database entry containing a long album title...

CVE-2008-0629

Buffer overflow in streamcddb.c in MPlayer 1.0rc2 and SVN before r25824 allows remote user-assisted attackers to execute arbitrary code via a CDDB database entry containing a long album title...

CVE-2008-0629

Buffer overflow in streamcddb.c in MPlayer 1.0rc2 and SVN before r25824 allows remote user-assisted attackers to execute arbitrary code via a CDDB database entry containing a long album title...

CVE-2008-0630

Buffer overflow in url.c in MPlayer 1.0rc2 and SVN before r25823 allows remote attackers to execute arbitrary code via a crafted URL that prevents the IPv6 parsing code from setting a pointer to NULL, which causes the buffer to be reused by the unescape code...

CVE-2008-0630

Buffer overflow in url.c in MPlayer 1.0rc2 and SVN before r25823 allows remote attackers to execute arbitrary code via a crafted URL that prevents the IPv6 parsing code from setting a pointer to NULL, which causes the buffer to be reused by the unescape code...

Design/Logic Flaw

Buffer overflow in url.c in MPlayer 1.0rc2 and SVN before r25823 allows remote attackers to execute arbitrary code via a crafted URL that prevents the IPv6 parsing code from setting a pointer to NULL, which causes the buffer to be reused by the unescape code...

CVE-2008-0630

Buffer overflow in url.c in MPlayer 1.0rc2 and SVN before r25823 allows remote attackers to execute arbitrary code via a crafted URL that prevents the IPv6 parsing code from setting a pointer to NULL, which causes the buffer to be reused by the unescape code...

DEBIAN-CVE-2008-0630

Buffer overflow in url.c in MPlayer 1.0rc2 and SVN before r25823 allows remote attackers to execute arbitrary code via a crafted URL that prevents the IPv6 parsing code from setting a pointer to NULL, which causes the buffer to be reused by the unescape code...

CVE-2008-0630

Buffer overflow in url.c in MPlayer 1.0rc2 and SVN before r25823 allows remote attackers to execute arbitrary code via a crafted URL that prevents the IPv6 parsing code from setting a pointer to NULL, which causes the buffer to be reused by the unescape code...

CVE-2008-0629

The CVE-2008-0629 entry affects MPlayer (1.0rc2 and SVN before r25824) via a buffer overflow in stream_cddb.c when processing a CDDB album title, allowing remote code execution. Connected advisories indicate updated packages/patches have been released to fix this in affected distributions, but th...

CVE-2008-0629

Buffer overflow in streamcddb.c in MPlayer 1.0rc2 and SVN before r25824 allows remote user-assisted attackers to execute arbitrary code via a CDDB database entry containing a long album title...

CVE-2008-0630

Buffer overflow in url.c in MPlayer 1.0rc2 and SVN before r25823 allows remote attackers to execute arbitrary code via a crafted URL that prevents the IPv6 parsing code from setting a pointer to NULL, which causes the buffer to be reused by the unescape code...

CVE-2008-0630

CVE-2008-0630 : A buffer overflow in url.c of MPlayer 1.0rc2 and SVN builds before r25823 allows remote code execution via a crafted URL. The overflow occurs because IPv6 parsing can fail to set a NULL pointer, causing the buffer to be reused by the unescape code. This is part of a set of related...

CVE-2008-0629

Buffer overflow in streamcddb.c in MPlayer 1.0rc2 and SVN before r25824 allows remote user-assisted attackers to execute arbitrary code via a CDDB database entry containing a long album title...

CVE-2008-0629: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in streamcddb.c in MPlayer 1.0rc2 and SVN before r25824 allows remote user-assisted attackers to execute arbitrary code via a CDDB database entry containing a long album title...