Vulnerability in Mplayer

CVE-2007-2948

Multiple stack-based buffer overflows in stream/stream_cddb.c in MPlayer before 1.0rc1try3 allow remote attackers to execute arbitrary code via a CDDB entry with a long (1) album title or (2) category.

EPSS: 0.057 (92.3th percentile) — read the EPSS interpretation.

Affected products

  • Mplayer — versions 1.0_rc1
  • N/a — versions n/a

References