PT-2006-2510 · Mplayer · Mplayer

Thierry Carrez · Published 2006-03-30 · Updated 2018-10-18 · CVE-2006-1502

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: MPlayer version 1.0pre7try2

Description: The issue concerns multiple integer overflows that can be triggered by remote attackers, leading to a denial of service and potentially heap-based buffer overflows. This can occur through two main vectors: (1) a specially crafted ASF file that, when handled by the asfheader.c component, causes the asf descrambling function to receive a negative integer after a char to int conversion, or (2) an AVI file with specifically crafted values for wLongsPerEntry or nEntriesInUse in the indx chunk, handled in aviheader.c.

Recommendations: For MPlayer version 1.0pre7try2, consider updating to a newer version that addresses these integer overflows, as using outdated versions may expose users to denial of service and buffer overflow risks. As a temporary workaround, consider restricting the handling of ASF and AVI files until a patch is available.

Fix

Related Identifiers

CVE-2006-1502

Affected Products

Mplayer

References · 18

• http://mandriva.com/security/advisories?name=MDKSA-2006:068 · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200605-01.xml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-1502 · Security Note
• http://secunia.com/advisories/19418 · Vendor Advisory
• http://xfocus.org/advisories/200603/11.html · Vendor Advisory
• http://securityfocus.com/bid/17295 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25514 · Note
• http://securitytracker.com/id?1015842 · Note
• http://secunia.com/advisories/19919 · Note
• http://securityreason.com/securityalert/647 · Note
• http://osvdb.org/24246 · Note
• http://vupen.com/english/advisories/2006/1156 · Note
• http://osvdb.org/24247 · Note
• http://securityfocus.com/archive/1/429251/100/0/threaded · Note
• http://secunia.com/advisories/19565 · Note