MPlayer 1.0rc2 buffer overflow vulnerability

Advisory ID Internal CORE-2007-1218 Advisory Information: Title: MPlayer 1.0rc2 buffer overflow vulnerability Advisory ID: CORE-2007-1218 Advisory URL:https://www.coresecurity.com/core-labs/advisories/mplayer-overflow-advisorie Date published: 2008-02-04 Date of last update: 2008-02-01 Vendors...

MPlayer arbitrary pointer dereference

Advisory ID Internal CORE-2008-0122 Advisory Information Title: MPlayer arbitrary pointer dereference Advisory ID: CORE-2008-0122 Advisory URL:https://www.coresecurity.com/core-labs/advisories/mplayer-advisorie Date published: 2008-02-04 Date of last update: 2008-01-30 Vendors contacted: MPlayer...

MPlayer 1.0rc2 - demux_mov.c Remote Code Execution

MPlayer 1.0rc2 - demuxmov.c Remote Code Execution source: https://www.securityfocus.com/bid/27499/info MPlayer is prone to a remote code-execution vulnerability because it fails to sanitize certain 'MOV' file tags before using them to index heap memory. An attacker can exploit this issue to execu...

MPlayer 1.0rc2 - 'demux_mov.c' Remote Code Execution

source: https://www.securityfocus.com/bid/27499/info MPlayer is prone to a remote code-execution vulnerability because it fails to sanitize certain 'MOV' file tags before using them to index heap memory. An attacker can exploit this issue to execute arbitrary code, which can result in the complet...

Debian Security Advisory DSA 1313-1 (mplayer)

The remote host is missing an update to mplayer announced via advisory DSA 1313-1. OpenVAS Vulnerability Test $Id: deb13131.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1313-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-1313-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-0225

Heap-based buffer overflow in the rmffdumpcont function in input/libreal/rmff.c in xine-lib 1.1.9 and earlier allows remote attackers to execute arbitrary code via the SDP Abstract attribute in an RTSP session, related to the rmffdumpheader function and related to disregarding the max field. NOTE...

DTSA-65-1 mplayer - denial of service via crafted .avi file

Bulletin has no description...

[ MDKSA-2007:192 ] - Updated mplayer packages fix vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:192 http://www.mandriva.com/security/ Package : mplayer Date : October 1, 2007 Affected: 2007.0, 2007.1 Problem Description: A heap-based buffer overflow was found in MPlayer's AVI handling that could allow ...

MPlayer buffer overflow

Buffer overflow on AVI files parsing...

Mandrake Linux Security Advisory : mplayer (MDKSA-2007:192)

A heap-based buffer overflow was found in MPlayer's AVI handling that could allow a remote attacker to cause a denial of service or possibly execute arbitrary code via a crafted .avi file. Updated packages have been patched to prevent this issue. %NASLMINLEVEL 70300 C Tenable Network Security, In...

CVE-2007-4938

Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a .avi file with certain large "indx truck size" and nEntriesInuse values, and a certain wLongsPerEntry...

DEBIAN-CVE-2007-4938

Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a .avi file with certain large "indx truck size" and nEntriesInuse values, and a certain wLongsPerEntry...

CVE-2007-4938

Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a .avi file with certain large "indx truck size" and nEntriesInuse values, and a certain wLongsPerEntry...

Heap overflow

Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a .avi file with certain large "indx truck size" and nEntriesInuse values, and a certain wLongsPerEntry...

CVE-2007-4938

MPlayer up to 1.0rc1 (and earlier) is affected by a vulnerability where remote attackers can trigger a denial of service (SIGSEGV and application crash) by supplying malformed multimedia files. The confirmed vectors include malformed MP3, Ogg Vorbis, MPEG-1/2, AVI, FLAC, Ogg Theora, WMV, and AAC ...

CVE-2007-4938

Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a .avi file with certain large "indx truck size" and nEntriesInuse values, and a certain wLongsPerEntry...

CVE-2007-4938

Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a .avi file with certain large "indx truck size" and nEntriesInuse values, and a certain wLongsPerEntry...

CAL-20070912-1 Multiple vendor produce handling AVI file vulnerabilities

CAL-20070912-1 Multiple vendor produce handling AVI file vulnerabilities Code Audit Labs http://www.vulnhunt.com Code Audit for some popular media player and discovered some vulnerabilities. one heap overflow was discovered in MPlayer. one heap overflow and one integer overflow were discovered in...

MPlayer 1.0 - AVIHeader.C Heap Buffer Overflow

MPlayer 1.0 - AVIHeader.C Heap Buffer Overflow source: https://www.securityfocus.com/bid/25648/info MPlayer is prone to a heap-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input data. Attackers can exploit this issue to execute arbitrar...