908 matches found
CVE-2022-38858
Certain The MPlayer Project products are vulnerable to Buffer Overflow via function movbuildindex of libmpdemux/demuxmov.c. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1...
MPlayer 缓冲区错误漏洞
MPlayer is an open source multimedia player from the MPlayer team. A security vulnerability exists in MPlayer SVN-r38374-13.0.1 version, mencoder SVN-r38374-13.0.1 version, which originates from a buffer overflow in the movbuildindex function in libmpdemux/demuxmov.c. The vulnerability is caused ...
PT-2022-7420 · Mplayer +4 · Mplayer +4
Name of the Vulnerable Software and Affected Versions: MPlayer versions SVN-r38374-13.0.1 mencoder versions SVN-r38374-13.0.1 Description: The issue is related to a Buffer Overflow via the gen sh video function in mplayer/libmpdemux/demux mov.c. This can potentially allow an attacker to cause a...
PT-2022-7416 · Mplayer +3 · Mplayer +5
Name of the Vulnerable Software and Affected Versions: mencoder versions SVN-r38374-13.0.1 mplayer versions SVN-r38374-13.0.1 Description: The issue is related to a Buffer Overflow via the function mp unescape03 of libmpdemux/mpeg hdr.c. This can potentially allow an attacker to cause a denial of...
PT-2022-7414 · Unknown +5 · Libmpdemux +5
Name of the Vulnerable Software and Affected Versions: mplayer versions SVN-r38374-13.0.1 mencoder versions SVN-r38374-13.0.1 Description: The issue is related to a Buffer Overflow via the read avi header function of libmpdemux/aviheader.c. This can potentially allow an attacker to cause a denial...
CVE-2022-38858
CVE-2022-38858 affects The MPlayer Project: buffer overflow in mov_build_index() inside libmpdemux/demux_mov.c, impacting mplayer and mencoder built from SVN-r38374-13.0.1. Connected sources corroborate multiple MPlayer vulnerabilities around the same codebase (buffer overflows, divide-by-zero, o...
CVE-2022-38863
Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mpgetbits of libmpdemux/mpeghdr.c which affects mencoder and mplayer. This affects mecoder SVN-r38374-13.0.1 and mplayer SVN-r38374-13.0.1...
CVE-2022-38850
CVE-2022-38850, 38851, 38855, 38858, 38860, 38861, 38863, 38864, 38865, 38866 affect MPlayer and mencoder (SVN-r38374-13.0.1). The issues span Divide By Zero in llibmpcodecs/vf_scale.c (CVE-38850) and other problems including Out-of-bounds Read (CVE-38851), Buffer Overflow (CVE-38855, 38858, 3886...
CVE-2022-38851
CVE-2022-38851 affects The MPlayer Project: mplayer and mencoder (SVN-r38374-13.0.1). The root cause is an out-of-bounds read in read_meta_record() within mplayer/libmpdemux/asfheader.c. Impact per sources is a crash/denial of service when processing certain malformed media files, with no broader...
MPlayer 缓冲区错误漏洞
MPlayer is an open source multimedia player from the MPlayer team. A security vulnerability exists in MPlayer SVN-r38374-13.0.1 version, mencoder SVN-r38374-13.0.1 version, which originates from a buffer overflow in the play function in libaf/af.c:639...
CVE-2022-32317
The MPlayer Project v1.5 was discovered to contain a heap use-after-free resulting in a double free in the preinit function at libvo/vov4l2.c. This vulnerability can lead to a Denial of Service DoS via a crafted file. The device=strdup statement is not executed on every call. Note: This has been...
CVE-2022-32317
The MPlayer Project v1.5 was discovered to contain a heap use-after-free resulting in a double free in the preinit function at libvo/vov4l2.c. This vulnerability can lead to a Denial of Service DoS via a crafted file. The device=strdup statement is not executed on every call. Note: This has been...
CVE-2022-32317
The MPlayer Project v1.5 was discovered to contain a heap use-after-free resulting in a double free in the preinit function at libvo/vov4l2.c. This vulnerability can lead to a Denial of Service DoS via a crafted file. The device=strdup statement is not executed on every call. Note: This has been...
Double free
The MPlayer Project v1.5 was discovered to contain a heap use-after-free resulting in a double free in the preinit function at libvo/vov4l2.c. This vulnerability can lead to a Denial of Service DoS via a crafted file. The device=strdup statement is not executed on every call...
UBUNTU-CVE-2022-32317
DISPUTED The MPlayer Project v1.5 was discovered to contain a heap use-after-free resulting in a double free in the preinit function at libvo/vov4l2.c. This vulnerability can lead to a Denial of Service DoS via a crafted file. The device=strdup statement is not executed on every call. Note: This...
CVE-2022-32317
The MPlayer Project v1.5 was discovered to contain a heap use-after-free resulting in a double free in the preinit function at libvo/vov4l2.c. This vulnerability can lead to a Denial of Service DoS via a crafted file. The device=strdup statement is not executed on every call. Note: This has been...
MPlayer 资源管理错误漏洞
MPlayer is an open source multimedia player from the MPlayer team. A resource management error vulnerability exists in MPlayer v1.5, which stems from post-release reuse in the preinit function of libvo/vov4l2.c. An attacker could use this vulnerability to cause a Denial of Service DoS via a...
PT-2022-21224 · Mplayer · Mplayer
Name of the Vulnerable Software and Affected Versions: The MPlayer Project version 1.5 Description: A heap use-after-free issue in the preinit function at libvo/vo v4l2.c can result in a double free, leading to a Denial of Service DoS via a crafted file. The device variable, which is assigned usi...
CVE-2022-32317
The CVE affects MPlayer Project v1.5, with a heap use-after-free in preinit (libvo/vo_v4l2.c) causing DoS via a crafted file. The vulnerable detail centers on the device=strdup path not executed on every call. Public disclosures reference multiple sources; exploitation status is not clearly provi...
Slackware: Security Advisory (SSA:2016-034-02)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...