CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
Percentile
93.5%
The oCERT team reports:
The MPlayer multimedia player suffers from a vulnerability which
could result in arbitrary code execution and at the least, in
unexpected process termination. Three integer underflows located
in the Real demuxer code can be used to exploit a heap overflow,
a specific video file can be crafted in order to make the
stream_read function reading or writing arbitrary amounts of
memory.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
FreeBSD | any | noarch | mplayer | < 0.99.11_7 | UNKNOWN |
FreeBSD | any | noarch | mplayer-esound | < 0.99.11_7 | UNKNOWN |
FreeBSD | any | noarch | mplayer-gtk | < 0.99.11_7 | UNKNOWN |
FreeBSD | any | noarch | mplayer-gtk2 | < 0.99.11_7 | UNKNOWN |
FreeBSD | any | noarch | mplayer-gtk-esound | < 0.99.11_7 | UNKNOWN |
FreeBSD | any | noarch | mplayer-gtk2-esound | < 0.99.11_7 | UNKNOWN |