CVE-2008-5616

Stack-based buffer overflow in the demux_open_vqf function in libmpdemux/demux_vqf.c in MPlayer 1.0 rc2 before r28150 allows remote attackers to execute arbitrary code via a malformed TwinVQ file.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
10 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:C/A:C
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 96%
VendorProductVersion
mplayermplayer
𝑥
≤ 1.0_rc1
mplayermplayer
0.90
mplayermplayer
0.90_pre:_pre
mplayermplayer
0.90_rc:_rc
mplayermplayer
0.90_rc4:_rc4
mplayermplayer
0.91
mplayermplayer
0.92
mplayermplayer
0.92.1
mplayermplayer
0.92_cvs:_cvs
mplayermplayer
1.0_pre1:_pre1
mplayermplayer
1.0_pre2:_pre2
mplayermplayer
1.0_pre3:_pre3
mplayermplayer
1.0_pre3try2:_pre3try2
mplayermplayer
1.0_pre4:_pre4
mplayermplayer
1.0_pre5:_pre5
mplayermplayer
1.0_pre5try1:_pre5try1
mplayermplayer
1.0_pre5try2:_pre5try2
mplayermplayer
1.0_pre6:_pre6
mplayermplayer
1.0_pre7:_pre7
mplayermplayer
1.0_pre7try2:_pre7try2
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
mplayer
bullseye
2:1.4+ds1-1+deb11u1
fixed
bookworm
2:1.5+svn38408-1
fixed
sid
2:1.5+svn38542-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
mplayer
oneiric
not-affected
natty
not-affected
maverick
not-affected
lucid
not-affected
karmic
not-affected
jaunty
ignored
intrepid
ignored
hardy
ignored
gutsy
ignored
dapper
ignored