CVE-2012-6044 M-Player 0.4 allows remote attackers to cause a denial of service (crash) via a crafted MP3 file.

MediumCVSS 4.3 EPSS 2.5% PoC

Published: 2012-11-27 00:00
Updated: 2026-06-17 02:47
Exploit status: Proof-of-concept only

Sign in for asset impact Search another CVE

Description

M-Player 0.4 allows remote attackers to cause a denial of service (crash) via a crafted MP3 file.

Affected products

Product	Affected versions	Fixed in
mjsware m-player	= 4.3	No fix listed

References

18337 exploit
51318 exploit vdb-entry
mplayer-mp3-dos(72242) vdb-entry

CVSS v2.0

4.3 Medium

AV:N/AC:M/Au:N/C:N/I:N/A:P

Access Vector: Network
Access Complexity: Medium
Authentication: None
Confidentiality: None
Integrity: None
Availability: Partial

Weakness & likelihood

EPSS (exploitation probability, 30 days): 2.48% (percentile 84.8)
CWE: CWE-20

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

M-Player 0.4 - Local Denial of Service PoC · Exploit Database (OffSec) · 2012-01-08