CVE-2006-1502

CVE-2006-1502 : The vulnerability affects MPlayer (including mplayer-bin) where multiple integer overflows occur in ASF and AVI handling. The asf_descrambling path can receive a negative int after char-to-int conversion in asfheader.c, and the indx chunk in AVI handling can be crafted via wLongsP...

MPlayer media player integer overflow

Integer overflow on ASF files playing and different multimedia formats...

[Full-disclosure] [xfocus-SD-060329]MPlayer: Multiple integer overflows

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 xfocus-SD-060329MPlayer: Multiple integer overflows MPlayer is a media player capable of handling multiple multimedia file formats. XFOCUS team http://www.xfocus.org/ had discovered Multiple integer overflows .Those can lead to a heap-based buffer...

MPlayer Crafted Media File Integer Overflow

Binary data 3491.prm...

Mandrake Linux Security Advisory : mplayer (MDKSA-2006:048)

Multiple integer overflows in 1 the newdemuxpacket function in demuxer.h and 2 the demuxasfreadpacket function in demuxasf.c in MPlayer 1.0pre7try2 and earlier allow remote attackers to execute arbitrary code via an ASF file with a large packet length value. The updated packages have been patched...

GLSA-200603-03 : MPlayer: Multiple integer overflows

The remote host is affected by the vulnerability described in GLSA-200603-03 MPlayer: Multiple integer overflows MPlayer makes use of the FFmpeg library, which is vulnerable to a heap overflow in the avcodecdefaultgetbuffer function discovered by Simon Kilvington see GLSA 200601-06. Furthermore,...

MPlayer: Multiple integer overflows

Background MPlayer is a media player capable of handling multiple multimedia file formats. Description MPlayer makes use of the FFmpeg library, which is vulnerable to a heap overflow in the avcodecdefaultgetbuffer function discovered by Simon Kilvington see GLSA 200601-06. Furthermore, AFI Securi...

Integer overflow

Multiple integer overflows in 1 the newdemuxpacket function in demuxer.h and 2 the demuxasfreadpacket function in demuxasf.c in MPlayer 1.0pre7try2 and earlier allow remote attackers to execute arbitrary code via an ASF file with a large packet length value. NOTE: the provenance of this informati...

CVE-2006-0579

Multiple integer overflows in 1 the newdemuxpacket function in demuxer.h and 2 the demuxasfreadpacket function in demuxasf.c in MPlayer 1.0pre7try2 and earlier allow remote attackers to execute arbitrary code via an ASF file with a large packet length value. NOTE: the provenance of this informati...

CVE-2006-0579

Multiple integer overflows in 1 the newdemuxpacket function in demuxer.h and 2 the demuxasfreadpacket function in demuxasf.c in MPlayer 1.0pre7try2 and earlier allow remote attackers to execute arbitrary code via an ASF file with a large packet length value. NOTE: the provenance of this informati...

CVE-2006-0579

Multiple integer overflows in 1 the newdemuxpacket function in demuxer.h and 2 the demuxasfreadpacket function in demuxasf.c in MPlayer 1.0pre7try2 and earlier allow remote attackers to execute arbitrary code via an ASF file with a large packet length value. NOTE: the provenance of this informati...

CVE-2006-0579

CVE-2006-0579 affects MPlayer up to the 1.0pre7ty2 line, due to two integer/heap overflows in ASF demuxing code: new_demux_packet in libmpdemux/demuxer.h and demux_asf_read_packet in libmpdemux/demux_asf.c. The flaws enable remote attackers to execute arbitrary code by feeding a crafted ASF file ...

CVE-2006-0579

Multiple integer overflows in 1 the newdemuxpacket function in demuxer.h and 2 the demuxasfreadpacket function in demuxasf.c in MPlayer 1.0pre7try2 and earlier allow remote attackers to execute arbitrary code via an ASF file with a large packet length value. NOTE: the provenance of this informati...

[SA18718] MPlayer ASF File Parsing Integer Overflow Vulnerabilities

TITLE: MPlayer ASF File Parsing Integer Overflow Vulnerabilities SECUNIA ADVISORY ID: SA18718 VERIFY ADVISORY: http://secunia.com/advisories/18718/ CRITICAL: Moderately critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: MPlayer 1.x http://secunia.com/product/2255/ DESCRIPTION: AFI...

Mandrake Linux Security Advisory : mplayer (MDKSA-2005:230)

Simon Kilvington discovered a vulnerability in FFmpeg libavcodec, which can be exploited by malicious people to cause a DoS Denial of Service and potentially to compromise a user's system. The vulnerability is caused due to a boundary error in the 'avcodecdefaultgetbuffer' function of 'utils.c' i...

MDKSA-2005:230 - Updated mplayer packages fix buffer overflow vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2005:230 http://www.mandriva.com/security/ Package : mplayer Date : December 14, 2005 Affected: 2006.0, Corporate 3.0 Problem Description: Simon Kilvington discovered a vulnerability in FFmpeg libavcodec, which c...

CVE-2005-4048

Heap-based buffer overflow in the avcodecdefaultgetbuffer function utils.c in FFmpeg libavcodec 0.4.9-pre1 and earlier, as used in products such as 1 mplayer, 2 xine-lib, 3 Xmovie, and 4 GStreamer, allows remote attackers to execute arbitrary commands via small PNG images with palettes...

Mandrake Linux Security Advisory : mplayer (MDKSA-2005:158)

Buffer overflow in adpcm.c in MPlayer 1.0pre7 and earlier allows remote attackers to execute arbitrary code via a video file with an audio header containing a large value in a strf chunk. The updated packages have been patched to correct this problem. %NASLMINLEVEL 70300 C Tenable Network Securit...

GLSA-200509-01 : MPlayer: Heap overflow in ad_pcm.c

The remote host is affected by the vulnerability described in GLSA-200509-01 MPlayer: Heap overflow in adpcm.c Sven Tantau discovered a heap overflow in the code handling the strf chunk of PCM audio streams. Impact : An attacker could craft a malicious video or audio file which, when opened using...

MPlayer: Heap overflow in ad_pcm.c

Background MPlayer is a media player capable of handling multiple multimedia file formats. Description Sven Tantau discovered a heap overflow in the code handling the strf chunk of PCM audio streams. Impact An attacker could craft a malicious video or audio file which, when opened using MPlayer,...