Vulnerability in Mplayer

CVE-2008-4610

MPlayer allows remote attackers to cause a denial of service (application crash) via (1) a malformed AAC file, as demonstrated by lol-vlc.aac; or (2) a malformed Ogg Media (OGM) file, as demonstrated by lol-ffplay.ogm, different vectors than CVE-2007-6718.

EPSS: 0.093 (94.8th percentile) — read the EPSS interpretation.

Affected products

Mplayer — versions 0.90, 0.90_pre, 0.90_rc
N/a — versions n/a

Weakness classification (CWE)

CWE-399

References

cve@mitre.org (mailing-list, x_refsource_MLIST)
cve@mitre.org (x_refsource_UBUNTU, vendor-advisory)
cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)