Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
9.3
CVSSv2

CVE-2007-2948

Published: 07/06/2007 Updated: 29/07/2017
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
VMScore: 828
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Subscribe to Mplayer

Vulnerability Summary

Multiple stack-based buffer overflows in stream/stream_cddb.c in MPlayer prior to 1.0rc1try3 allow remote malicious users to execute arbitrary code via a CDDB entry with a long (1) album title or (2) category.

Vulnerable Product Search on Vulmon Subscribe to Product

mplayer mplayer 1.0_rc1

Vendor Advisories

Debian Security Advisories: DSA-1313-1 mplayer -- buffer overflow
Stefan Cornelius and Reimar Doeffinger discovered that the MPlayer movie player performs insufficient boundary checks when accessing CDDB data, which might lead to the execution of arbitrary code The oldstable distribution (sarge) doesn't include MPlayer packages For the stable distribution (etch) this problem has been fixed in version 10~rc1-12 ...

References

NVD-CWE-Otherhttp://lists.mplayerhq.hu/pipermail/mplayer-announce/2007-June/000066.htmlhttp://secunia.com/secunia_research/2007-55/http://svn.mplayerhq.hu/mplayer/trunk/stream/stream_cddb.c?r1=23287&r2=23470&diff_format=uhttp://www.mplayerhq.hu/design7/news.htmlhttp://www.securityfocus.com/bid/24339http://secunia.com/advisories/24302http://www.debian.org/security/2007/dsa-1313http://security.gentoo.org/glsa/glsa-200707-07.xmlhttp://www.mandriva.com/security/advisories?name=MDKSA-2007:143http://www.novell.com/linux/security/advisories/2007_14_sr.htmlhttp://secunia.com/advisories/25713http://secunia.com/advisories/25940http://secunia.com/advisories/26083http://secunia.com/advisories/26207http://www.vupen.com/english/advisories/2007/2080http://osvdb.org/36991https://exchange.xforce.ibmcloud.com/vulnerabilities/34749https://nvd.nist.govhttps://www.debian.org/security/./dsa-1313
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
NULL pointer dereferenceCVE-2023-52689CVE-2024-23803client sideCVE-2023-52696information disclosureCVE-2024-35843CVE-2024-27130CVE-2023-52697
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook