Debian Security Advisory DSA 1782-1 (mplayer)

The remote host is missing an update to mplayer announced via advisory DSA 1782-1. OpenVAS Vulnerability Test $Id: deb17821.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1782-1 mplayer Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian DSA-1782-1 : mplayer - several vulnerabilities

Several vulnerabilities have been discovered in mplayer, a movie player for Unix-like systems. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0385 It was discovered that watching a malformed 4X movie file could lead to the execution of arbitrary...

[SECURITY] [DSA 1782-1] New mplayer packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1782-1 [email protected] http://www.debian.org/security/ Steffen Joeris April 29, 2009 http://www.debian.org/security/faq -...

Mandriva Linux Security Advisory : mplayer (MDVSA-2009:014)

Several vulnerabilities have been discovered in mplayer, which could allow remote attackers to execute arbitrary code via a malformed TwinVQ file CVE-2008-5616, and in ffmpeg, as used by mplayer, related to the execution of DTS generation code CVE-2008-4866. The updated packages have been patched...

Mandriva Linux Security Advisory : mplayer (MDVSA-2009:013)

Several vulnerabilities have been discovered in mplayer, which could allow remote attackers to execute arbitrary code via a malformed TwinVQ file CVE-2008-5616, and in ffmpeg, as used by mplayer, related to the execution of DTS generation code CVE-2008-4866 and incorrect handling of DCAMAXFRAMESI...

Gentoo Security Advisory GLSA 200903-33 (ffmpeg gst-plugins-ffmpeg mplayer)

The remote host is missing updates announced in advisory GLSA 200903-33. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200903-33 (ffmpeg gst-plugins-ffmpeg mplayer)

The remote host is missing updates announced in advisory GLSA 200903-33. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

USN-734-1: FFmpeg vulnerabilities

It was discovered that FFmpeg did not correctly handle certain malformed Ogg Media OGM files. If a user were tricked into opening a crafted Ogg Media file, an attacker could cause the application using FFmpeg to crash, leading to a denial of service. CVE-2008-4610 It was discovered that FFmpeg di...

Mandrake Security Advisory MDVSA-2009:014 (mplayer)

The remote host is missing an update to mplayer announced via advisory MDVSA-2009:014. OpenVAS Vulnerability Test $Id: mdksa2009014.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:014 mplayer Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Mandrake Security Advisory MDVSA-2009:013 (mplayer)

The remote host is missing an update to mplayer announced via advisory MDVSA-2009:013. OpenVAS Vulnerability Test $Id: mdksa2009013.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:013 mplayer Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Mandrake Security Advisory MDVSA-2009:015 (ffmpeg)

The remote host is missing an update to ffmpeg announced via advisory MDVSA-2009:015. OpenVAS Vulnerability Test $Id: mdksa2009015.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:015 ffmpeg Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...

Mandrake Security Advisory MDVSA-2009:013 (mplayer)

The remote host is missing an update to mplayer announced via advisory MDVSA-2009:013. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

CVE-2008-4866

CVE-2008-4866 concerns FFmpeg 0.4.9 (before r14715) via libavformat/utils.c, where multiple buffer overflows could be triggered in the DTS generation path if a delay exceeds MAX_REORDER_DELAY. The FFmpeg component is used by MPlayer, so a context-dependent attacker could potentially execute arbit...