CVE-2004-1285 Buffer overflow in the get_header function in asf_mmst_streaming.c for MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a crafted ASF video stream.
HighCVSS 10.0
EPSS 5.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the get_header function in asf_mmst_streaming.c for MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a crafted ASF video stream.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mplayer | = 0.90 | No fix listed |
| mplayer | = 0.91 | No fix listed |
| mplayer | = 0.92 | No fix listed |
| mplayer | = 0.92.1 | No fix listed |
| mplayer | = 1.0_pre1 | No fix listed |
| mplayer | = 1.0_pre2 | No fix listed |
| mplayer | = 1.0_pre3 | No fix listed |
| mplayer | = 1.0_pre3try2 | No fix listed |
| mplayer | = 1.0_pre4 | No fix listed |
| mplayer | = 1.0_pre5 | No fix listed |
| mplayer | = 1.0_pre5try1 | No fix listed |
References
- tigger.uic.edu exploit vendor-advisory
- mplayer-getdata-bo(18631) vdb-entry