Denial Of Service (DoS)

mplayer is vulnerable to Denial Of Service DoS. The vulnerability exists due to the memory corruption in the freempimage function of mpimage.c, allowing an attacker to crash the application...

Denial Of Service (DoS)

mplayer is vulnerable to Denial Of Service DoS. The vulnerability exists due to the divide by zero error occurs in the demuxopenavi function of demuxavi.c, allowing an attacker to crash the application...

Denial Of Service (DoS)

mplayer is vulnerable to Denial Of Service DoS. The vulnerability exists due to the buffer overflow in the mpgetbits function of mpeghdr.c, allowing an attacker to crash the application...

Denial Of Service (DoS)

mplayer is vulnerable to Denial Of Service DoS. The vulnerability exists due to the out-of-bounds read in the readmetarecord function of asfheader.c, allowing an attacker to crash the application...

Denial Of Service (DoS)

mplayer is vulnerable to Denial Of Service DoS. The vulnerability exists due to the buffer overflow in the movbuildindex function of demuxmov.c, allowing an attacker to crash the application...

Denial Of Service (DoS)

mplayer is vulnerable to Denial Of Service DoS. The vulnerability exists due to the buffer overflow in the genshvideo function of demuxmov.c, allowing an attacker to crash the application...

Denial Of Service (DoS)

mplayer is vulnerable to Denial Of Service DoS. The vulnerability exists due to the divide by zero error occurs in the config function of vfscale.c, allowing an attacker to crash the application...

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : MPlayer vulnerabilities (USN-5895-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5895-1 advisory. It was discovered that MPlayer could be made to divide by zero when processing certain malformed media files. If a us...

Ubuntu: Security Advisory (USN-5895-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5895-1: MPlayer vulnerabilities

It was discovered that MPlayer could be made to divide by zero when processing certain malformed media files. If a user were tricked into opening a specially crafted media file, an attacker could possibly use this issue to cause MPlayer to crash, resulting in a denial of service. CVE-2022-38850,...

SUSE CVE-2004-0386

Buffer overflow in the HTTP parser for MPlayer 1.0pre3 and earlier, 0.90, and 0.91 allows remote attackers to execute arbitrary code via a long Location header...

SUSE CVE-2004-1187

Heap-based buffer overflow in the pnmgetchunk function for xine 0.99.2, and other packages such as MPlayer that use the same code, allows remote attackers to execute arbitrary code via long PNATAG values, a different vulnerability than CVE-2004-1188...

SUSE CVE-2004-1188

The pnmgetchunk function in xine 0.99.2 and earlier, and other packages such as MPlayer that use the same code, does not properly verify that the chunk size is less than the PREAMBLESIZE, which causes a read operation with a negative length that leads to a buffer overflow via 1 RMFTAG, 2 DATATAG,...

SUSE CVE-2004-1285

Buffer overflow in the getheader function in asfmmststreaming.c for MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a crafted ASF video stream...

SUSE CVE-2004-1310

Stack-based buffer overflow in the asfmmststreaming.c functionality for MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a large MMST stream packet...

SUSE CVE-2004-1309

Heap-based buffer overflow in the demuxopenbmp function in demuxbmp.c for Unix MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a bitmap BMP file containing a large biClrUsed field...

SUSE CVE-2004-1311

Integer overflow in the realsetupandgetheader function in real.c for Unix MPlayer 1.0pre5 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a Real RTSP streaming media file with a -1 content-length field, which leads to a heap-based...

SUSE CVE-2006-0579

Multiple integer overflows in 1 the newdemuxpacket function in demuxer.h and 2 the demuxasfreadpacket function in demuxasf.c in MPlayer 1.0pre7try2 and earlier allow remote attackers to execute arbitrary code via an ASF file with a large packet length value. NOTE: the provenance of this informati...

SUSE CVE-2006-1502

Multiple integer overflows in MPlayer 1.0pre7try2 allow remote attackers to cause a denial of service and trigger heap-based buffer overflows via 1 a certain ASF file handled by asfheader.c that causes the asfdescrambling function to be passed a negative integer after the conversion from a char t...

SUSE CVE-2007-1246

The DMOVideoDecoderOpen function in loader/dmo/DMOVideoDecoder.c in MPlayer 1.0rc1 and earlier, as used in xine-lib, does not set the biSize before use in a memcpy, which allows user-assisted remote attackers to cause a buffer overflow and possibly execute arbitrary code, a different vulnerabilit...