Lucene search

RedhatCVE-2008-3827

HistorySep 29, 2008 - 7:25 p.m.

CVE-2008-3827

2008-09-2919:25:59

CWE-189

redhat

web.nvd.nist.gov

cve-2008-3827

integer underflows

real demuxer

mplayer

denial of service

arbitrary code

nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.4

Confidence

High

EPSS

0.06

Percentile

93.5%

JSON

Multiple integer underflows in the Real demuxer (demux_real.c) in MPlayer 1.0_rc2 and earlier allow remote attackers to cause a denial of service (process termination) and possibly execute arbitrary code via a crafted video file that causes the stream_read function to read or write arbitrary memory.

Affected configurations

Nvd

Node

mplayermplayerRange≤1.0_rc2

mplayermplayerMatch0.90

mplayermplayerMatch0.90_pre

mplayermplayerMatch0.90_rc

mplayermplayerMatch0.90_rc4

mplayermplayerMatch0.91

mplayermplayerMatch0.92

mplayermplayerMatch0.92.1

mplayermplayerMatch0.92_cvs

mplayermplayerMatch1.0_pre1

mplayermplayerMatch1.0_pre2

mplayermplayerMatch1.0_pre3

mplayermplayerMatch1.0_pre3try2

mplayermplayerMatch1.0_pre4

mplayermplayerMatch1.0_pre5

mplayermplayerMatch1.0_pre5try1

mplayermplayerMatch1.0_pre5try2

mplayermplayerMatch1.0_pre6

mplayermplayerMatch1.0_pre7

mplayermplayerMatch1.0_pre7try2

mplayermplayerMatch1.0_rc1

VendorProductVersionCPE
mplayermplayer0.92+cvscpe:/a:mplayer:mplayer:0.92+cvs:::
mplayermplayer0.90+precpe:/a:mplayer:mplayer:0.90+pre:::
mplayermplayer1.0+pre5try1cpe:/a:mplayer:mplayer:1.0+pre5try1:::
mplayermplayer0.90cpe:/a:mplayer:mplayer:0.90:::
mplayermplayer0.90+rccpe:/a:mplayer:mplayer:0.90+rc:::
mplayermplayer0.90+rc4cpe:/a:mplayer:mplayer:0.90+rc4:::
mplayermplayer1.0+pre7cpe:/a:mplayer:mplayer:1.0+pre7:::
mplayermplayer1.0+pre5cpe:/a:mplayer:mplayer:1.0+pre5:::
mplayermplayer1.0+pre7try2cpe:/a:mplayer:mplayer:1.0+pre7try2:::
mplayermplayer1.0+pre1cpe:/a:mplayer:mplayer:1.0+pre1:::

Vendor	Product	Version	CPE
mplayer	mplayer	0.92+cvs	cpe:/a:mplayer:mplayer:0.92+cvs:::
mplayer	mplayer	0.90+pre	cpe:/a:mplayer:mplayer:0.90+pre:::
mplayer	mplayer	1.0+pre5try1	cpe:/a:mplayer:mplayer:1.0+pre5try1:::
mplayer	mplayer	0.90	cpe:/a:mplayer:mplayer:0.90:::
mplayer	mplayer	0.90+rc	cpe:/a:mplayer:mplayer:0.90+rc:::
mplayer	mplayer	0.90+rc4	cpe:/a:mplayer:mplayer:0.90+rc4:::
mplayer	mplayer	1.0+pre7	cpe:/a:mplayer:mplayer:1.0+pre7:::
mplayer	mplayer	1.0+pre5	cpe:/a:mplayer:mplayer:1.0+pre5:::
mplayer	mplayer	1.0+pre7try2	cpe:/a:mplayer:mplayer:1.0+pre7try2:::
mplayer	mplayer	1.0+pre1	cpe:/a:mplayer:mplayer:1.0+pre1:::