CVE-2008-3827
29.09.2008, 19:25
Multiple integer underflows in the Real demuxer (demux_real.c) in MPlayer 1.0_rc2 and earlier allow remote attackers to cause a denial of service (process termination) and possibly execute arbitrary code via a crafted video file that causes the stream_read function to read or write arbitrary memory.Enginsight
| Vendor | Product | Version |
|---|---|---|
| mplayer | mplayer | 𝑥 ≤ 1.0_rc2 |
| mplayer | mplayer | 0.90 |
| mplayer | mplayer | 0.90_pre:_pre |
| mplayer | mplayer | 0.90_rc:_rc |
| mplayer | mplayer | 0.90_rc4:_rc4 |
| mplayer | mplayer | 0.91 |
| mplayer | mplayer | 0.92 |
| mplayer | mplayer | 0.92.1 |
| mplayer | mplayer | 0.92_cvs:_cvs |
| mplayer | mplayer | 1.0_pre1:_pre1 |
| mplayer | mplayer | 1.0_pre2:_pre2 |
| mplayer | mplayer | 1.0_pre3:_pre3 |
| mplayer | mplayer | 1.0_pre3try2:_pre3try2 |
| mplayer | mplayer | 1.0_pre4:_pre4 |
| mplayer | mplayer | 1.0_pre5:_pre5 |
| mplayer | mplayer | 1.0_pre5try1:_pre5try1 |
| mplayer | mplayer | 1.0_pre5try2:_pre5try2 |
| mplayer | mplayer | 1.0_pre6:_pre6 |
| mplayer | mplayer | 1.0_pre7:_pre7 |
| mplayer | mplayer | 1.0_pre7try2:_pre7try2 |
| mplayer | mplayer | 1.0_rc1:_rc1 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References