Adam Bozanich

**Name of the Vulnerable Software and Affected Versions** MPlayer versions 1.0rc2 and prior to SVN r25824 **Description** The issue is related to a buffer overflow in the stream cddb.c file, which allows remote attackers to execute arbitrary code. This can be achieved by a remote user-assisted attacker via a CDDB database entry that contains a long album title. **Recommendations** For MPlayer version 1.0rc2, update to a version after SVN r25824 to resolve the issue. For MPlayer versions prior to SVN r25824, update to a version after SVN r25824 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** MPlayer versions 1.0rc2 and prior to SVN r25823 **Description** The issue is related to a buffer overflow in the url.c file, which allows remote attackers to execute arbitrary code via a crafted URL. This occurs because the IPv6 parsing code fails to set a pointer to NULL, causing the buffer to be reused by the unescape code. **Recommendations** For MPlayer versions 1.0rc2 and prior to SVN r25823, update to a version after SVN r25823 to resolve the issue.