Description
Buffer overflow in stream_cddb.c in MPlayer 1.0rc2 and SVN before r25824 allows remote user-assisted attackers to execute arbitrary code via a CDDB database entry containing a long album title.
References (8)
Core 8
Core References
Various Sources x_refsource_confirm
http://www.mplayerhq.hu/design7/news.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/27765
Vendor Advisory vendor-advisory
x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2008:045
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/28955
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/29307
Third Party Advisory vendor-advisory
x_refsource_debian
http://www.debian.org/security/2008/dsa-1496
Third Party Advisory vendor-advisory
x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-200803-16.xml
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/28956
Scores
EPSS
0.0277
EPSS Percentile
84.7%
Details
CWE
CWE-119
Status
published
Products (1)
mplayer/mplayer
1.02rc2
Published
Feb 06, 2008
Tracked Since
Feb 18, 2026