Vulnerability in Mplayer
CVE-2008-3827
Multiple integer underflows in the Real demuxer (demux_real.c) in MPlayer 1.0_rc2 and earlier allow remote attackers to cause a denial of service (process termination) and possibly execute arbitrary code via a crafted video file that causes the stream_read function to read or write arbitrary memory.
EPSS: 0.109 (95.4th percentile) — read the EPSS interpretation.
Affected products
- Mplayer — versions 0.90, 0.90_pre, 0.90_rc
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (Patch, x_refsource_MISC)
- secalert@redhat.com (x_refsource_SREASON, third-party-advisory)
- secalert@redhat.com (x_refsource_SECUNIA, third-party-advisory)
- secalert@redhat.com (vdb-entry, x_refsource_BID)
- secalert@redhat.com (vdb-entry, x_refsource_VUPEN)
- secalert@redhat.com (mailing-list, x_refsource_BUGTRAQ)
- secalert@redhat.com (x_refsource_CONFIRM)
- secalert@redhat.com (vendor-advisory, x_refsource_MANDRIVA)
- secalert@redhat.com (vendor-advisory, x_refsource_DEBIAN)
- secalert@redhat.com (x_refsource_SECUNIA, third-party-advisory)