CVE-2008-4610

MPlayer allows remote attackers to cause a denial of service (application crash) via (1) a malformed AAC file, as demonstrated by lol-vlc.aac; or (2) a malformed Ogg Media (OGM) file, as demonstrated by lol-ffplay.ogm, different vectors than CVE-2007-6718.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 87%
VendorProductVersion
mplayermplayer
𝑥
≤ 1.0_rc1
mplayermplayer
0.90
mplayermplayer
0.90_pre:_pre
mplayermplayer
0.90_rc:_rc
mplayermplayer
0.90_rc4:_rc4
mplayermplayer
0.91
mplayermplayer
0.92
mplayermplayer
0.92.1
mplayermplayer
0.92_cvs:_cvs
mplayermplayer
1.0_pre1:_pre1
mplayermplayer
1.0_pre2:_pre2
mplayermplayer
1.0_pre3:_pre3
mplayermplayer
1.0_pre3try2:_pre3try2
mplayermplayer
1.0_pre4:_pre4
mplayermplayer
1.0_pre5:_pre5
mplayermplayer
1.0_pre5try1:_pre5try1
mplayermplayer
1.0_pre5try2:_pre5try2
mplayermplayer
1.0_pre6:_pre6
mplayermplayer
1.0_pre7:_pre7
mplayermplayer
1.0_pre7try2:_pre7try2
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
ffmpeg
bullseye
7:4.3.7-0+deb11u1
fixed
bullseye (security)
7:4.3.8-0+deb11u1
fixed
bookworm
7:5.1.6-0+deb12u1
fixed
bookworm (security)
7:5.1.6-0+deb12u1
fixed
sid
7:7.1-3
fixed
trixie
7:7.1-3
fixed
mplayer
bullseye
2:1.4+ds1-1+deb11u1
fixed
bookworm
2:1.5+svn38408-1
fixed
sid
2:1.5+svn38542-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
ffmpeg
saucy
dne
raring
dne
quantal
dne
precise
dne
oneiric
dne
natty
dne
maverick
not-affected
lucid
not-affected
karmic
not-affected
jaunty
not-affected
intrepid
ignored
hardy
Fixed 3:0.cvs20070307-5ubuntu7.2
released
gutsy
Fixed 3:0.cvs20070307-5ubuntu4.2
released
dapper
ignored
ffmpeg-debian
saucy
dne
raring
dne
quantal
dne
precise
dne
oneiric
dne
natty
dne
maverick
dne
lucid
dne
karmic
dne
jaunty
not-affected
intrepid
Fixed 3:0.svn20080206-12ubuntu3.1
released
hardy
dne
gutsy
dne
feisty
dne
dapper
dne
mplayer
saucy
not-affected
raring
not-affected
quantal
not-affected
precise
not-affected
oneiric
not-affected
natty
ignored
maverick
ignored
lucid
ignored
karmic
ignored
jaunty
ignored
intrepid
ignored
hardy
ignored
gutsy
ignored
dapper
ignored
Common Weakness Enumeration