PT-2006-1641 · Mplayer · Mplayer

Published 2006-02-08 · Updated 2017-07-20 · CVE-2006-0579

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MPlayer versions 1.0pre7try2 and earlier

Description The issue is related to multiple integer overflows in the new demux packet function in demuxer.h and the demux asf read packet function in demux asf.c. This allows remote attackers to execute arbitrary code via an ASF file with a large packet length value.

Recommendations For MPlayer versions 1.0pre7try2 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-0579

Affected Products

Mplayer

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2006-0579 · Security Note
• http://mandriva.com/security/advisories?name=MDKSA-2006:048 · Vendor Advisory
• http://secunia.com/advisories/18718 · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200603-03.xml · Vendor Advisory
• http://secunia.com/advisories/19114 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24531 · Note
• http://vupen.com/english/advisories/2006/0457 · Note