PT-2006-1641 · Mplayer · Mplayer

Publicado 2006-02-08 · Atualizado 2017-07-20 · CVE-2006-0579

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MPlayer versions 1.0pre7try2 and earlier

Description The issue is related to multiple integer overflows in the new demux packet function in demuxer.h and the demux asf read packet function in demux asf.c. This allows remote attackers to execute arbitrary code via an ASF file with a large packet length value.

Recommendations For MPlayer versions 1.0pre7try2 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2006-0579

Produtos afetados

Mplayer

Referências · 7

• http://secunia.com/advisories/19114 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24531 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0579 · Nota de Segurança
• http://vupen.com/english/advisories/2006/0457 · Nota
• http://mandriva.com/security/advisories?name=MDKSA-2006:048 · Aviso do Fabricante
• http://secunia.com/advisories/18718 · Aviso do Fabricante
• http://gentoo.org/security/en/glsa/glsa-200603-03.xml · Aviso do Fabricante