CVE-2008-0630

MPlayer 1.0rc2 and SVN before r25823 - Buffer Overflow via URL Parsing

Title source: llm

Description

Buffer overflow in url.c in MPlayer 1.0rc2 and SVN before r25823 allows remote attackers to execute arbitrary code via a crafted URL that prevents the IPv6 parsing code from setting a pointer to NULL, which causes the buffer to be reused by the unescape code.

References (8)

Core 8

Core References

Various Sources x_refsource_confirm

http://www.mplayerhq.hu/design7/news.html

Vendor Advisory vendor-advisory x_refsource_mandriva

http://www.mandriva.com/security/advisories?name=MDVSA-2008:045

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/28955

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/27766

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/29307

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2008/dsa-1496

Third Party Advisory vendor-advisory x_refsource_gentoo

http://security.gentoo.org/glsa/glsa-200803-16.xml

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/28956

Scores

EPSS 0.0388

EPSS Percentile 89.0%

Details

CWE

CWE-119

Status published

Products (1)

mplayer/mplayer 1.02rc2

Published Feb 06, 2008

Tracked Since Feb 18, 2026