MP
Vendor
Mplayer
29
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2011-0723 | MP Mplayer Mplayer | – | May 20 | FFmpeg 0.5.x, as used in MPlayer and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed… |
| CVE-2008-5616 | MP Mplayer Mplayer | – | Dec 17 | Stack-based buffer overflow in the demux_open_vqf function in libmpdemux/demux_vqf.c in MPlayer 1.0 rc2 before r28150 allows remote attackers to execute arbitrary code via a… |
| CVE-2008-4610 | MP Mplayer Mplayer | – | Oct 20 | MPlayer allows remote attackers to cause a denial of service (application crash) via (1) a malformed AAC file, as demonstrated by lol-vlc.aac; or (2) a malformed Ogg Media (OGM)… |
| CVE-2007-6718 | MP Mplayer Mplayer | – | Oct 20 | MPlayer, possibly 1.0rc1, allows remote attackers to cause a denial of service (SIGSEGV and application crash) via (1) a malformed MP3 file, as demonstrated by lol-mplayer.mp3;… |
| CVE-2008-3827 | MP Mplayer Mplayer | – | Sep 29 | Multiple integer underflows in the Real demuxer (demux_real.c) in MPlayer 1.0_rc2 and earlier allow remote attackers to cause a denial of service (process termination) and… |
| CVE-2008-1558 | MP Mplayer Mplayer | – | Mar 31 | Uncontrolled array index in the sdpplin_parse function in stream/realrtsp/sdpplin.c in MPlayer 1.0 rc2 allows remote attackers to overwrite memory and execute arbitrary code via a… |
| CVE-2008-0630 | MP Mplayer Mplayer | – | Feb 6 | Buffer overflow in url.c in MPlayer 1.0rc2 and SVN before r25823 allows remote attackers to execute arbitrary code via a crafted URL that prevents the IPv6 parsing code from… |
| CVE-2008-0629 | MP Mplayer Mplayer | – | Feb 6 | Buffer overflow in stream_cddb.c in MPlayer 1.0rc2 and SVN before r25824 allows remote user-assisted attackers to execute arbitrary code via a CDDB database entry containing a… |
| CVE-2008-0486 | MP Mplayer Mplayer | – | Feb 5 | Array index vulnerability in libmpdemux/demux_audio.c in MPlayer 1.0rc2 and SVN before r25917, and possibly earlier versions, as used in Xine-lib 1.1.10, might allow remote… |
| CVE-2008-0485 | MP Mplayer Mplayer | – | Feb 5 | Array index error in libmpdemux/demux_mov.c in MPlayer 1.0 rc2 and earlier might allow remote attackers to execute arbitrary code via a QuickTime MOV file with a crafted stsc atom… |
| CVE-2007-4938 | MP Mplayer Mplayer | – | Sep 18 | Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute… |
| CVE-2007-2948 | MP Mplayer Mplayer | – | Jun 7 | Multiple stack-based buffer overflows in stream/stream_cddb.c in MPlayer before 1.0rc1try3 allow remote attackers to execute arbitrary code via a CDDB entry with a long (1) album… |
| CVE-2007-1387 | MP Mplayer Mplayer | – | Mar 13 | The DirectShow loader (loader/dshow/DS_VideoDecoder.c) in MPlayer 1.0rc1 and earlier, as used in xine-lib, does not set the biSize before use in a memcpy, which allows… |
| CVE-2007-1246 | MP Mplayer Mplayer | – | Mar 3 | The DMO_VideoDecoder_Open function in loader/dmo/DMO_VideoDecoder.c in MPlayer 1.0rc1 and earlier, as used in xine-lib, does not set the biSize before use in a memcpy, which… |
| CVE-2006-6172 | MP Mplayer Mplayer | – | Nov 30 | Buffer overflow in the asmrp_eval function in the RealMedia RTSP stream handler (asmrp.c) for Real Media input plugin, as used in (1) xine/xine-lib, (2) MPlayer 1.0rc1 and… |
| CVE-2006-1502 | MP Mplayer Mplayer | – | Mar 30 | Multiple integer overflows in MPlayer 1.0pre7try2 allow remote attackers to cause a denial of service and trigger heap-based buffer overflows via (1) a certain ASF file handled by… |
| CVE-2006-0579 | MP Mplayer Mplayer | – | Feb 8 | Multiple integer overflows in (1) the new_demux_packet function in demuxer.h and (2) the demux_asf_read_packet function in demux_asf.c in MPlayer 1.0pre7try2 and earlier allow… |
| CVE-2005-2718 | MP Mplayer Mplayer | – | Aug 29 | Buffer overflow in ad_pcm.c in MPlayer 1.0pre7 and earlier allows remote attackers to execute arbitrary code via crafted PCM audio data, as demonstrated using a video file with an… |
| CVE-2005-1195 | MP Mplayer Mplayer | – | May 2 | Multiple heap-based buffer overflows in the code used to handle (1) MMS over TCP (MMST) streams or (2) RealMedia RTSP streams in xine-lib before 1.0, and other products that use… |
| CVE-2004-1285 | MP Mplayer Mplayer | – | Jan 10 | Buffer overflow in the get_header function in asf_mmst_streaming.c for MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a crafted ASF video stream |
| CVE-2004-1187 | MP Mplayer Mplayer | – | Jan 10 | Heap-based buffer overflow in the pnm_get_chunk function for xine 0.99.2, and other packages such as MPlayer that use the same code, allows remote attackers to execute arbitrary… |
| CVE-2004-1188 | MP Mplayer Mplayer | – | Jan 10 | The pnm_get_chunk function in xine 0.99.2 and earlier, and other packages such as MPlayer that use the same code, does not properly verify that the chunk size is less than the… |
| CVE-2004-1311 | MP Mplayer Mplayer | – | Jan 10 | Integer overflow in the real_setup_and_get_header function in real.c for Unix MPlayer 1.0pre5 allows remote attackers to cause a denial of service (application crash) and possibly… |
| CVE-2004-1310 | MP Mplayer Mplayer | – | Jan 10 | Stack-based buffer overflow in the asf_mmst_streaming.c functionality for MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a large MMST stream packet |
| CVE-2004-1309 | UM Unix Mplayer Mplayer | – | Jan 10 | Heap-based buffer overflow in the demux_open_bmp function in demux_bmp.c for Unix MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a bitmap (BMP) file… |
| CVE-2004-0433 | MP Mplayer Mplayer | – | Aug 18 | Multiple buffer overflows in the Real-Time Streaming Protocol (RTSP) client for (1) MPlayer before 1.0pre4 and (2) xine lib (xine-lib) before 1-rc4, when playing Real RTSP… |
| CVE-2004-0659 | MP Mplayer Mplayer | – | Aug 6 | Buffer overflow in TranslateFilename for common.c in MPlayer 1.0pre4 allows remote attackers to execute arbitrary code via a long file name |
| CVE-2004-0386 | MP Mplayer Mplayer | – | May 4 | Buffer overflow in the HTTP parser for MPlayer 1.0pre3 and earlier, 0.90, and 0.91 allows remote attackers to execute arbitrary code via a long Location header |
| CVE-2003-0835 | MP Mplayer Mplayer | – | Nov 17 | Multiple buffer overflows in asf_http_request of MPlayer before 0.92 allows remote attackers to execute arbitrary code via an ASX header with a long hostname |