MPlayer demux_open_vqf TwinVQ File Handling Buffer Overflow (CVE-2008-5616)

MPlayer is an open source multimedia player for Linux that is also available in a Mac OS X and Windows versions. It can play many audio and video formats MPEG, DivX, ogg, TwinVQ, etc. as well as various streaming protocols. It is highly portable and available for multiple platforms. There exists ...

Debian DSA-1782-1 : mplayer - several vulnerabilities

Several vulnerabilities have been discovered in mplayer, a movie player for Unix-like systems. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0385 It was discovered that watching a malformed 4X movie file could lead to the execution of arbitrary...

Mandrake Security Advisory MDVSA-2009:014 (mplayer)

The remote host is missing an update to mplayer announced via advisory MDVSA-2009:014. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandrake Security Advisory MDVSA-2009:013 (mplayer)

The remote host is missing an update to mplayer announced via advisory MDVSA-2009:013. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandrake Security Advisory MDVSA-2009:014 (mplayer)

The remote host is missing an update to mplayer announced via advisory MDVSA-2009:014. OpenVAS Vulnerability Test $Id: mdksa2009014.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:014 mplayer Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Mandrake Security Advisory MDVSA-2009:013 (mplayer)

The remote host is missing an update to mplayer announced via advisory MDVSA-2009:013. OpenVAS Vulnerability Test $Id: mdksa2009013.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:013 mplayer Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

MPlayer Stack Buffer Overflow

!/usr/bin/perl MPlayer 1.0rc2 TwinVQ Stack Buffer Overflow PoC PoC by Amirreza Aminsalehi "sCORPINo" Proud To be an Abay scorpino x40 gmail x2e com Snoop Security Researching Committee www.snoop-security.com Originaly this bug discovered by Tobias Klein advisory @...

MPlayer 1.0rc2 TwinVQ Stack Buffer Overflow PoC

Exploit for multiple platform in category dos / poc =============================================== MPlayer 1.0rc2 TwinVQ Stack Buffer Overflow PoC =============================================== !/usr/bin/perl MPlayer 1.0rc2 TwinVQ Stack Buffer Overflow PoC PoC by Amirreza Aminsalehi "sCORPINo"...

MPlayer 1.0rc2 - TwinVQ Stack Buffer Overflow (PoC)

!/usr/bin/perl MPlayer 1.0rc2 TwinVQ Stack Buffer Overflow PoC PoC by Amirreza Aminsalehi "sCORPINo" Proud To be an Abay scorpino x40 gmail x2e com Snoop Security Researching Committee www.snoop-security.com Originaly this bug discovered by Tobias Klein advisory @...

MPlayer 1.0rc2 - TwinVQ Stack Buffer Overflow (PoC)

MPlayer 1.0rc2 - TwinVQ Stack Buffer Overflow PoC !/usr/bin/perl MPlayer 1.0rc2 TwinVQ Stack Buffer Overflow PoC PoC by Amirreza Aminsalehi "sCORPINo" Proud To be an Abay scorpino x40 gmail x2e com Snoop Security Researching Committee www.snoop-security.com Originaly this bug discovered by Tobias...

mplayer -- twinvq processing buffer overflow vulnerability

The remote host is missing an update to the system as announced in the referenced advisory. VID 7c5bd5b8-d652-11dd-a765-0030843d3802 OpenVAS Vulnerability Test $ Description: Auto generated from VID 7c5bd5b8-d652-11dd-a765-0030843d3802 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

mplayer -- twinvq processing buffer overflow vulnerability

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD : mplayer -- twinvq processing buffer overflow vulnerability (7c5bd5b8-d652-11dd-a765-0030843d3802)

A trapkit reports : MPlayer contains a stack-based buffer overflow vulnerability while parsing malformed TwinVQ media files. The vulnerability may be exploited by a remote attacker to execute arbitrary code in the context of MPlayer. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

MPlayer TwinVQ文件处理栈溢出漏洞

BUGTRAQ ID: 32822 MPlayer是一款基于Linux的媒体播放程序，支持多种媒体格式。 MPlayer的libmpdemux/demuxvqf.c文件中的demuxopenvqf函数在处理特制的TwinVQ文件时存在栈溢出漏洞。以下是libmpdemux\demuxvqf.c文件中的有漏洞代码段： ... 24 static demuxert demuxopenvqfdemuxert demuxer ... 49 char chunkid4; 50 unsigned chunksize; 51 1 hi-size=chunksize=streamreaddwords; ...

Stack overflow

Stack-based buffer overflow in the demuxopenvqf function in libmpdemux/demuxvqf.c in MPlayer 1.0 rc2 before r28150 allows remote attackers to execute arbitrary code via a malformed TwinVQ file...

CVE-2008-5616

Stack-based buffer overflow in the demuxopenvqf function in libmpdemux/demuxvqf.c in MPlayer 1.0 rc2 before r28150 allows remote attackers to execute arbitrary code via a malformed TwinVQ file...

CVE-2008-5616

Stack-based buffer overflow in the demuxopenvqf function in libmpdemux/demuxvqf.c in MPlayer 1.0 rc2 before r28150 allows remote attackers to execute arbitrary code via a malformed TwinVQ file...

CVE-2008-5616

Stack-based buffer overflow in the demuxopenvqf function in libmpdemux/demuxvqf.c in MPlayer 1.0 rc2 before r28150 allows remote attackers to execute arbitrary code via a malformed TwinVQ file...

DEBIAN-CVE-2008-5616

Stack-based buffer overflow in the demuxopenvqf function in libmpdemux/demuxvqf.c in MPlayer 1.0 rc2 before r28150 allows remote attackers to execute arbitrary code via a malformed TwinVQ file...

CVE-2008-5616

CVE-2008-5616 affects MPlayer 1.0 rc2 and earlier, with a stack-based buffer overflow in demux_open_vqf (libmpdemux/demux_vqf.c) that can be triggered by processing malformed TwinVQ files, leading to remote arbitrary code execution. Connected advisories/documents confirm multiple vendors (e.g., D...