CVE-2008-3827

EPSS 3.6%

mplayer - integer overflows

發布日:2008/9/29修改日:2026/3/9

也稱為:DSA-1644-1DEBIAN-CVE-2008-3827

描述

Multiple integer underflows in the Real demuxer (demux_real.c) in MPlayer 1.0_rc2 and earlier allow remote attackers to cause a denial of service (process termination) and possibly execute arbitrary code via a crafted video file that causes the stream_read function to read or write arbitrary memory.

受影響套件(3)

Debian/mplayerfrom 0, < 1.0~rc2-18
Debian/mplayerfrom 0, < 1.0~rc1-12etch5
Debian/mplayerfrom 0, < 1.0~rc2-17+lenny1

參考連結(1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2008-3827