CVE-2007-2948 Multiple stack-based buffer overflows in stream/stream_cddb.c in MPlayer before 1.0rc1try3 allow remote attackers to execute arbitrary code via a CDDB entry with a long (1) album title or (2) category...
HighCVSS 9.3
EPSS 5.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple stack-based buffer overflows in stream/stream_cddb.c in MPlayer before 1.0rc1try3 allow remote attackers to execute arbitrary code via a CDDB entry with a long (1) album title or (2) category.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mplayer | = 1.0_rc1 | No fix listed |
| debian/mplayer(Debian:12) | < 1.0~rc1-14 | 1.0~rc1-14 |
| debian/mplayer(Debian:13) | < 1.0~rc1-14 | 1.0~rc1-14 |
| debian/mplayer(Debian:14) | < 1.0~rc1-14 | 1.0~rc1-14 |
References
- [MPlayer-announce] 20070605 MPlayer 1.0rc1try3 released mailing-list patch
- 36991 vdb-entry
- 24302 patch third-party-advisory vendor-advisory
- 25713 third-party-advisory
- 25940 third-party-advisory
- 26083 third-party-advisory
- 26207 third-party-advisory
- secunia.com
- GLSA-200707-07 vendor-advisory
- svn.mplayerhq.hu
- DSA-1313 vendor-advisory
- MDKSA-2007:143 vendor-advisory
- www.mplayerhq.hu
- SUSE-SR:2007:014 vendor-advisory
- 24339 vdb-entry
- ADV-2007-2080 vdb-entry
- mplayer-cddb-bo(34749) vdb-entry
- Debian Security Tracker CVE-2007-2948 vendor-advisory