CVE-2008-0629

Buffer overflow in stream_cddb.c in MPlayer 1.0rc2 and SVN before r25824 allows remote user-assisted attackers to execute arbitrary code via a CDDB database entry containing a long album title.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 85%
VendorProductVersion
mplayermplayer
1.02rc2:rc2
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
mplayer
bullseye
2:1.4+ds1-1+deb11u1
fixed
bookworm
2:1.5+svn38408-1
fixed
sid
2:1.5+svn38542-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
mplayer
gutsy
Fixed 2:1.0~rc1-0ubuntu13.2
released
feisty
Fixed 2:1.0~rc1-0ubuntu9.3
released
edgy
Fixed 2:0.99+1.0pre8-0ubuntu8.3
released
dapper
Fixed 2:0.99+1.0pre7try2+cvs20060117-0ubuntu8.2
released
Common Weakness Enumeration
References
http://secunia.com/advisories/28955
http://secunia.com/advisories/28956
http://secunia.com/advisories/29307
http://security.gentoo.org/glsa/glsa-200803-16.xml
http://www.debian.org/security/2008/dsa-1496
http://www.mandriva.com/security/advisories?name=MDVSA-2008:045
http://www.mplayerhq.hu/design7/news.html
http://www.securityfocus.com/bid/27765
http://secunia.com/advisories/28955
http://secunia.com/advisories/28956
http://secunia.com/advisories/29307
http://security.gentoo.org/glsa/glsa-200803-16.xml
http://www.debian.org/security/2008/dsa-1496
http://www.mandriva.com/security/advisories?name=MDVSA-2008:045
http://www.mplayerhq.hu/design7/news.html
http://www.securityfocus.com/bid/27765