MP
Product
Mplayer
28
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Mplayer to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2011-0723 | – | May 20 | FFmpeg 0.5.x, as used in MPlayer and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed… Affected: All versions, or not specified |
| CVE-2008-5616 | – | Dec 17 | Stack-based buffer overflow in the demux_open_vqf function in libmpdemux/demux_vqf.c in MPlayer 1.0 rc2 before r28150 allows remote attackers to execute arbitrary code via a… Affected: through 1.0_rc1; 0.90; 0.90_pre; 0.90_rc; 0.90_rc4; 0.91; +14 more |
| CVE-2008-4610 | – | Oct 20 | MPlayer allows remote attackers to cause a denial of service (application crash) via (1) a malformed AAC file, as demonstrated by lol-vlc.aac; or (2) a malformed Ogg Media (OGM)… Affected: through 1.0_rc1; 0.90; 0.90_pre; 0.90_rc; 0.90_rc4; 0.91; +14 more |
| CVE-2007-6718 | – | Oct 20 | MPlayer, possibly 1.0rc1, allows remote attackers to cause a denial of service (SIGSEGV and application crash) via (1) a malformed MP3 file, as demonstrated by lol-mplayer.mp3;… Affected: through 1.0_rc1; 0.90; 0.90_pre; 0.90_rc; 0.90_rc4; 0.91; +14 more |
| CVE-2008-3827 | – | Sep 29 | Multiple integer underflows in the Real demuxer (demux_real.c) in MPlayer 1.0_rc2 and earlier allow remote attackers to cause a denial of service (process termination) and… Affected: through 1.0_rc2; 0.90; 0.90_pre; 0.90_rc; 0.90_rc4; 0.91; +15 more |
| CVE-2008-1558 | – | Mar 31 | Uncontrolled array index in the sdpplin_parse function in stream/realrtsp/sdpplin.c in MPlayer 1.0 rc2 allows remote attackers to overwrite memory and execute arbitrary code via a… Affected: 1.0_rc2 |
| CVE-2008-0630 | – | Feb 6 | Buffer overflow in url.c in MPlayer 1.0rc2 and SVN before r25823 allows remote attackers to execute arbitrary code via a crafted URL that prevents the IPv6 parsing code from… Affected: 1.02rc2 |
| CVE-2008-0629 | – | Feb 6 | Buffer overflow in stream_cddb.c in MPlayer 1.0rc2 and SVN before r25824 allows remote user-assisted attackers to execute arbitrary code via a CDDB database entry containing a… Affected: 1.02rc2 |
| CVE-2008-0485 | – | Feb 5 | Array index error in libmpdemux/demux_mov.c in MPlayer 1.0 rc2 and earlier might allow remote attackers to execute arbitrary code via a QuickTime MOV file with a crafted stsc atom… Affected: through 1.02rc2 |
| CVE-2008-0486 | – | Feb 5 | Array index vulnerability in libmpdemux/demux_audio.c in MPlayer 1.0rc2 and SVN before r25917, and possibly earlier versions, as used in Xine-lib 1.1.10, might allow remote… Affected: 1.02rc2 |
| CVE-2007-4938 | – | Sep 18 | Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute… Affected: 1.0_rc1 |
| CVE-2007-2948 | – | Jun 7 | Multiple stack-based buffer overflows in stream/stream_cddb.c in MPlayer before 1.0rc1try3 allow remote attackers to execute arbitrary code via a CDDB entry with a long (1) album… Affected: 1.0_rc1 |
| CVE-2007-1387 | – | Mar 13 | The DirectShow loader (loader/dshow/DS_VideoDecoder.c) in MPlayer 1.0rc1 and earlier, as used in xine-lib, does not set the biSize before use in a memcpy, which allows… Affected: through 1.0_rc1 |
| CVE-2007-1246 | – | Mar 3 | The DMO_VideoDecoder_Open function in loader/dmo/DMO_VideoDecoder.c in MPlayer 1.0rc1 and earlier, as used in xine-lib, does not set the biSize before use in a memcpy, which… Affected: through 1.0_rc1 |
| CVE-2006-6172 | – | Nov 30 | Buffer overflow in the asmrp_eval function in the RealMedia RTSP stream handler (asmrp.c) for Real Media input plugin, as used in (1) xine/xine-lib, (2) MPlayer 1.0rc1 and… Affected: through 1.0_rc1 |
| CVE-2006-1502 | – | Mar 30 | Multiple integer overflows in MPlayer 1.0pre7try2 allow remote attackers to cause a denial of service and trigger heap-based buffer overflows via (1) a certain ASF file handled by… Affected: through 1.0_pre7try2 |
| CVE-2006-0579 | – | Feb 8 | Multiple integer overflows in (1) the new_demux_packet function in demuxer.h and (2) the demux_asf_read_packet function in demux_asf.c in MPlayer 1.0pre7try2 and earlier allow… Affected: through 1.0_pre7try2 |
| CVE-2005-2718 | – | Aug 29 | Buffer overflow in ad_pcm.c in MPlayer 1.0pre7 and earlier allows remote attackers to execute arbitrary code via crafted PCM audio data, as demonstrated using a video file with an… Affected: through 1.0_pre7 |
| CVE-2005-1195 | – | May 2 | Multiple heap-based buffer overflows in the code used to handle (1) MMS over TCP (MMST) streams or (2) RealMedia RTSP streams in xine-lib before 1.0, and other products that use… Affected: through 1.0_pre6 |
| CVE-2004-1188 | – | Jan 10 | The pnm_get_chunk function in xine 0.99.2 and earlier, and other packages such as MPlayer that use the same code, does not properly verify that the chunk size is less than the… Affected: 0.90; 0.90_pre; 0.90_rc; 0.90_rc4; 0.91; 0.92; +11 more |
| CVE-2004-1311 | – | Jan 10 | Integer overflow in the real_setup_and_get_header function in real.c for Unix MPlayer 1.0pre5 allows remote attackers to cause a denial of service (application crash) and possibly… Affected: 1.0_pre5 |
| CVE-2004-1310 | – | Jan 10 | Stack-based buffer overflow in the asf_mmst_streaming.c functionality for MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a large MMST stream packet Affected: 1.0_pre5 |
| CVE-2004-1285 | – | Jan 10 | Buffer overflow in the get_header function in asf_mmst_streaming.c for MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a crafted ASF video stream Affected: 0.90; 0.91; 0.92; 0.92.1; 1.0_pre1; 1.0_pre2; +5 more |
| CVE-2004-1187 | – | Jan 10 | Heap-based buffer overflow in the pnm_get_chunk function for xine 0.99.2, and other packages such as MPlayer that use the same code, allows remote attackers to execute arbitrary… Affected: 0.90; 0.90_pre; 0.90_rc; 0.90_rc4; 0.91; 0.92; +11 more |
| CVE-2004-0433 | – | Aug 18 | Multiple buffer overflows in the Real-Time Streaming Protocol (RTSP) client for (1) MPlayer before 1.0pre4 and (2) xine lib (xine-lib) before 1-rc4, when playing Real RTSP… Affected: 1.0_pre3try2 |
| CVE-2004-0659 | – | Aug 6 | Buffer overflow in TranslateFilename for common.c in MPlayer 1.0pre4 allows remote attackers to execute arbitrary code via a long file name Affected: 0.90; 0.90_pre; 0.90_rc; 0.90_rc4; 0.91; 0.92; +8 more |
| CVE-2004-0386 | – | May 4 | Buffer overflow in the HTTP parser for MPlayer 1.0pre3 and earlier, 0.90, and 0.91 allows remote attackers to execute arbitrary code via a long Location header Affected: 0.90; 0.90_pre; 0.90_rc; 0.91; 1.0_pre1; 1.0_pre2; +1 more |
| CVE-2003-0835 | – | Nov 17 | Multiple buffer overflows in asf_http_request of MPlayer before 0.92 allows remote attackers to execute arbitrary code via an ASX header with a long hostname Affected: 0.90; 0.90_pre; 0.90_rc; 0.90_rc4; 0.91; 1.0_pre1 |
Showing 28