CVE-2008-1558 Uncontrolled array index in the sdpplin_parse function in stream/realrtsp/sdpplin.c in MPlayer 1.0 rc2 allows remote attackers to overwrite memory and execute arbitrary code via a large streamid SDP p...
HighCVSS 10.0
EPSS 16.8%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Uncontrolled array index in the sdpplin_parse function in stream/realrtsp/sdpplin.c in MPlayer 1.0 rc2 allows remote attackers to overwrite memory and execute arbitrary code via a large streamid SDP parameter. NOTE: this issue has been referred to as an integer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mplayer | = 1.0_rc2 | No fix listed |
| debian/mplayer(Debian:12) | < 1.0~rc2-10 | 1.0~rc2-10 |
| debian/mplayer(Debian:13) | < 1.0~rc2-10 | 1.0~rc2-10 |
| debian/mplayer(Debian:14) | < 1.0~rc2-10 | 1.0~rc2-10 |
References
- Debian Security Tracker CVE-2008-1558 vendor-advisory
- bugs.debian.org issue-tracking
- 29515 third-party-advisory vendor-advisory
- 29921 third-party-advisory
- 30412 third-party-advisory
- GLSA-200805-22 vendor-advisory
- DSA-1552 vendor-advisory
- MDVSA-2008:196 vendor-advisory
- 28851 vdb-entry
- ADV-2008-0997 vdb-entry
- mplayer-sdpplin-overflow(41490) vdb-entry
- 5307 exploit