DEBIAN-CVE-2016-4352

Integer overflow in the demuxer function in libmpdemux/demuxgif.c in Mplayer allows remote attackers to cause a denial of service crash via large dimensions in a gif file...

CVE-2016-4352

Integer overflow in the demuxer function in libmpdemux/demuxgif.c in Mplayer allows remote attackers to cause a denial of service crash via large dimensions in a gif file...

CVE-2016-4352

CVE-2016-4352 involves an integer overflow in the demuxer function libmpdemux/demux_gif.c in MPlayer. The vulnerability allows a remote attacker to cause a crash by providing a GIF with large width/height dimensions. Available connected documents confirm the same description across multiple sourc...

CVE-2016-4352

Integer overflow in the demuxer function in libmpdemux/demuxgif.c in Mplayer allows remote attackers to cause a denial of service crash via large dimensions in a gif file...

MPlayer libavcodec component out-of-bounds read vulnerability

MPlayer is an open source multimedia player product developed by MPlayer team. libavcodec is one of the encoding and decoding library components. A security vulnerability exists in MPlayer's libavcodec component. An attacker can exploit this vulnerability to cause an out-of-bounds read with an mp...

mplayer: denial of service

A vulnerability has been discovered that is leading to a crash when playing a fuzzed gif file. The gif demuxes assumed in many places that widthheight is = INTMAX, however this was not always true and was leading to an integer overflow...

Debian DLA-457-1 : mplayer security update

Mplayer is crashing when playing a fuzzed gif file. The gif demuxes assumes in many places that widthheight is = INTMAX; this might not be true. Fixed by validating the picture size. NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security...

[SECURITY] [DLA 457-1] mplayer security update

Package : mplayer Version : 2:1.0rc4.dfsg1+svn34540-1+deb7u2 CVE ID : CVE-2016-4352 Mplayer is crashing when playing a fuzzed gif file. The gif demuxes assumes in many places that widthheight is = INTMAX; this might not be true. Fixed by validating the picture size...

MPlayer Integer Overflow Vulnerability

MPlayer is an open source multimedia player developed by the MPlayer team, which supports multiple media formats and multiple drivers. MPlayer suffers from an integer overflow vulnerability. An attacker can exploit this vulnerability to cause a denial of service crash via a gif file...

DLA-457-1 mplayer - security update

Bulletin has no description...

[slackware-security] MPlayer

New MPlayer packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/MPlayer-1.220160125-i486-1slack14.1.txz: Upgraded. This is the latest MPlayer-1.2 branch, identical to the...

Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / current : MPlayer (SSA:2016-034-02)

New MPlayer packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2016-034-02. The text...

Gentoo Security Advisory GLSA 201310-13

Gentoo Linux Local Security Checks GLSA 201310-13 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

[SECURITY] [DSA 3156-1] liblivemedia security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3156-1 [email protected] http://www.debian.org/security/ Alessandro Ghedini February 07, 2015 http://www.debian.org/security/faq -...

CVE-2010-2062

Integer underflow in the realgetrdtchunk function in real.c, as used in modules/access/rtsp/real.c in VideoLAN VLC media player before 1.0.1 and stream/realrtsp/real.c in MPlayer before r29447, allows remote attackers to execute arbitrary code via a crafted length value in an RDT chunk header...

DEBIAN-CVE-2010-2062

Integer underflow in the realgetrdtchunk function in real.c, as used in modules/access/rtsp/real.c in VideoLAN VLC media player before 1.0.1 and stream/realrtsp/real.c in MPlayer before r29447, allows remote attackers to execute arbitrary code via a crafted length value in an RDT chunk header...

Integer overflow

Integer underflow in the realgetrdtchunk function in real.c, as used in modules/access/rtsp/real.c in VideoLAN VLC media player before 1.0.1 and stream/realrtsp/real.c in MPlayer before r29447, allows remote attackers to execute arbitrary code via a crafted length value in an RDT chunk header...

CVE-2010-2062

Integer underflow in the realgetrdtchunk function in real.c, as used in modules/access/rtsp/real.c in VideoLAN VLC media player before 1.0.1 and stream/realrtsp/real.c in MPlayer before r29447, allows remote attackers to execute arbitrary code via a crafted length value in an RDT chunk header...

CVE-2010-2062

CVE-2010-2062 describes an integer underflow in the real_get_rdt_chunk function (real.c) used by VLC media player and MPlayer. The vulnerability affects VLC before 1.0.1 and MPlayer before r29447, where a crafted length value in an RDT chunk header can cause a remote attacker to execute arbitrary...

CVE-2010-2062

Integer underflow in the realgetrdtchunk function in real.c, as used in modules/access/rtsp/real.c in VideoLAN VLC media player before 1.0.1 and stream/realrtsp/real.c in MPlayer before r29447, allows remote attackers to execute arbitrary code via a crafted length value in an RDT chunk header...