[SECURITY] [DSA 1313-1] New MPlayer packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1313-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 19th, 2007 http://www.debian.org/security/faq -...

CVE-2007-2948

Multiple stack-based buffer overflows in stream/streamcddb.c in MPlayer before 1.0rc1try3 allow remote attackers to execute arbitrary code via a CDDB entry with a long 1 album title or 2 category...

CVE-2007-2948

Summary: CVE-2007-2948 affects MPlayer; a vulnerability in stream_cddb.c allows remote attackers to trigger a stack-based buffer overflow via a CDDB entry with a long album title or category. Impact: remote code execution with the user’s privileges, over the network. Affected software/versions: M...