CVE-2006-0579

CVE-2006-0579 affects MPlayer up to the 1.0pre7ty2 line, due to two integer/heap overflows in ASF demuxing code: new_demux_packet in libmpdemux/demuxer.h and demux_asf_read_packet in libmpdemux/demux_asf.c. The flaws enable remote attackers to execute arbitrary code by feeding a crafted ASF file ...

CVE-2006-0579: Undefined Security Weakness

Multiple integer overflows in 1 the newdemuxpacket function in demuxer.h and 2 the demuxasfreadpacket function in demuxasf.c in MPlayer 1.0pre7try2 and earlier allow remote attackers to execute arbitrary code via an ASF file with a large packet length value. NOTE: the provenance of this informati...

[SA18718] MPlayer ASF File Parsing Integer Overflow Vulnerabilities

TITLE: MPlayer ASF File Parsing Integer Overflow Vulnerabilities SECUNIA ADVISORY ID: SA18718 VERIFY ADVISORY: http://secunia.com/advisories/18718/ CRITICAL: Moderately critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: MPlayer 1.x http://secunia.com/product/2255/ DESCRIPTION: AFI...

Mandrake Linux Security Advisory : mplayer (MDKSA-2005:230)

Simon Kilvington discovered a vulnerability in FFmpeg libavcodec, which can be exploited by malicious people to cause a DoS Denial of Service and potentially to compromise a user's system. The vulnerability is caused due to a boundary error in the 'avcodecdefaultgetbuffer' function of 'utils.c' i...

MDKSA-2005:230 - Updated mplayer packages fix buffer overflow vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2005:230 http://www.mandriva.com/security/ Package : mplayer Date : December 14, 2005 Affected: 2006.0, Corporate 3.0 Problem Description: Simon Kilvington discovered a vulnerability in FFmpeg libavcodec, which c...

CVE-2005-4048

Heap-based buffer overflow in the avcodecdefaultgetbuffer function utils.c in FFmpeg libavcodec 0.4.9-pre1 and earlier, as used in products such as 1 mplayer, 2 xine-lib, 3 Xmovie, and 4 GStreamer, allows remote attackers to execute arbitrary commands via small PNG images with palettes...

Mandrake Linux Security Advisory : mplayer (MDKSA-2005:158)

Buffer overflow in adpcm.c in MPlayer 1.0pre7 and earlier allows remote attackers to execute arbitrary code via a video file with an audio header containing a large value in a strf chunk. The updated packages have been patched to correct this problem. %NASLMINLEVEL 70300 C Tenable Network Securit...

GLSA-200509-01 : MPlayer: Heap overflow in ad_pcm.c

The remote host is affected by the vulnerability described in GLSA-200509-01 MPlayer: Heap overflow in adpcm.c Sven Tantau discovered a heap overflow in the code handling the strf chunk of PCM audio streams. Impact : An attacker could craft a malicious video or audio file which, when opened using...

MPlayer: Heap overflow in ad_pcm.c

Background MPlayer is a media player capable of handling multiple multimedia file formats. Description Sven Tantau discovered a heap overflow in the code handling the strf chunk of PCM audio streams. Impact An attacker could craft a malicious video or audio file which, when opened using MPlayer,...

CVE-2005-2718

Buffer overflow in adpcm.c in MPlayer 1.0pre7 and earlier allows remote attackers to execute arbitrary code via crafted PCM audio data, as demonstrated using a video file with an audio header containing a large value in a stream format strf chunk...

CVE-2005-2718

Buffer overflow in adpcm.c in MPlayer 1.0pre7 and earlier allows remote attackers to execute arbitrary code via crafted PCM audio data, as demonstrated using a video file with an audio header containing a large value in a stream format strf chunk...

CVE-2005-2718

Buffer overflow in adpcm.c in MPlayer 1.0pre7 and earlier allows remote attackers to execute arbitrary code via crafted PCM audio data, as demonstrated using a video file with an audio header containing a large value in a stream format strf chunk...

CVE-2005-2718

The CVE-2005-2718 flaw is a buffer/heap overflow in ad_pcm.c of MPlayer 1.0pre7 and earlier that can be triggered by crafted PCM data in a strf chunk, allowing remote code execution. Impact is described as running arbitrary code under the user’s privileges when opening affected media. Affected ve...

CVE-2005-2718: Undefined Security Weakness

Buffer overflow in adpcm.c in MPlayer 1.0pre7 and earlier allows remote attackers to execute arbitrary code via crafted PCM audio data, as demonstrated using a video file with an audio header containing a large value in a stream format strf chunk...

MPlayer < 1.0pre8 Audio Header strf Overflow

Binary data 3183.prm...

mplayer movie player buffer overflow

Buffer overflow on video file audio header...

[Full-disclosure] mplayer overflow

Hello, is someone able to confirm this? ---------------------------------------------------------- Advisory: mplayer buffer overflow Product: mplayer Affected Version: 1.0pre7 tested, 1.0pre6-r4 tested, 1.0pre6-3.3.5-20050130 confirmed OS affected: Linux 2.4. tested, 2.6. confirmed, other OS not...

FreeBSD : libxine -- multiple buffer overflows in RTSP (1b70bef4-649f-11d9-a30e-000a95bc6fae)

A xine security announcement states : Multiple vulnerabilities have been found and fixed in the Real-Time Streaming Protocol RTSP client for RealNetworks servers, including a series of potentially remotely exploitable buffer overflows. This is a joint advisory by the MPlayer and xine teams as the...

FreeBSD : mplayer -- multiple vulnerabilities (85d76f02-5380-11d9-a9e7-0001020eed82)

iDEFENSE and the MPlayer Team have found multiple vulnerabilities in MPlayer : - Potential heap overflow in Real RTSP streaming code - Potential stack overflow in MMST streaming code - Multiple buffer overflows in BMP demuxer - Potential heap overflow in pnm streaming code - Potential buffer...

FreeBSD : mplayer & libxine -- MMS and Real RTSP buffer overflow vulnerabilities (91c606fc-b5d0-11d9-a788-0001020eed82)

A xine security announcement reports : By a user receiving data from a malicious network streaming server, an attacker can overrun a heap buffer, which can, on some systems, lead to or help in executing attacker-chosen malicious code with the permissions of the user running a xine-lib based media...