CVE-2008-3827 Multiple integer underflows in the Real demuxer (demux_real.c) in MPlayer 1.0_rc2 and earlier allow remote attackers to cause a denial of service (process termination) and possibly execute arbitrary c...
HighCVSS 9.3
EPSS 10.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple integer underflows in the Real demuxer (demux_real.c) in MPlayer 1.0_rc2 and earlier allow remote attackers to cause a denial of service (process termination) and possibly execute arbitrary code via a crafted video file that causes the stream_read function to read or write arbitrary memory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mplayer | <= 1.0_rc2 | No fix listed |
| mplayer | = 0.90 | No fix listed |
| mplayer | = 0.90_pre | No fix listed |
| mplayer | = 0.90_rc | No fix listed |
| mplayer | = 0.90_rc4 | No fix listed |
| mplayer | = 0.91 | No fix listed |
| mplayer | = 0.92 | No fix listed |
| mplayer | = 0.92.1 | No fix listed |
| mplayer | = 0.92_cvs | No fix listed |
| mplayer | = 1.0_pre1 | No fix listed |
| mplayer | = 1.0_pre2 | No fix listed |
| mplayer | = 1.0_pre3 | No fix listed |
| mplayer | = 1.0_pre3try2 | No fix listed |
| mplayer | = 1.0_pre4 | No fix listed |
| mplayer | = 1.0_pre5 | No fix listed |
| mplayer | = 1.0_pre5try1 | No fix listed |
| mplayer | = 1.0_pre5try2 | No fix listed |
| mplayer | = 1.0_pre6 | No fix listed |
| mplayer | = 1.0_pre7 | No fix listed |
| mplayer | = 1.0_pre7try2 | No fix listed |
| mplayer | = 1.0_rc1 | No fix listed |
| debian/mplayer(Debian:12) | < 1.0~rc2-18 | 1.0~rc2-18 |
| debian/mplayer(Debian:13) | < 1.0~rc2-18 | 1.0~rc2-18 |
| debian/mplayer(Debian:14) | < 1.0~rc2-18 | 1.0~rc2-18 |
References
- 32045 third-party-advisory
- 32153 third-party-advisory
- 4326 third-party-advisory
- svn.mplayerhq.hu
- DSA-1644 vendor-advisory
- MDVSA-2008:219 vendor-advisory
- www.ocert.org patch
- 20080929 [oCERT-2008-013] MPlayer Real demuxer heap overflow mailing-list
- 31473 vdb-entry
- 1020952 vdb-entry
- ADV-2008-2703 vdb-entry
- Debian Security Tracker CVE-2008-3827 vendor-advisory
- bugs.debian.org issue-tracking