Published: 05/02/2008 Updated: 15/10/2018

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 935

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Array index error in libmpdemux/demux_mov.c in MPlayer 1.0 rc2 and previous versions might allow remote malicious users to execute arbitrary code via a QuickTime MOV file with a crafted stsc atom tag.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mplayer mplayer

Debian Bug report logs - #464533 mplayer: CVE-2008-0629 buffer overflow via crafted cddb title Package: mplayer; Maintainer for mplayer is Debian Multimedia Maintainers <debian-multimedia@listsdebianorg>; Source for mplayer is src:mplayer (PTS, buildd, popcon) Reported by: Nico Golde <nion@debianorg> Date: Thu, 7 ...

Debian Bug report logs - #464060 CVE-2008-0485/-0486: Vulnerabilities in mplayer Package: mplayer; Maintainer for mplayer is Debian Multimedia Maintainers <debian-multimedia@listsdebianorg>; Source for mplayer is src:mplayer (PTS, buildd, popcon) Reported by: Stefan Fritsch <sf@sfritschde> Date: Mon, 4 Feb 2008 2 ...

Debian Bug report logs - #464532 mplayer: CVE-2008-0630 buffer overflow via crafted url Package: mplayer; Maintainer for mplayer is Debian Multimedia Maintainers <debian-multimedia@listsdebianorg>; Source for mplayer is src:mplayer (PTS, buildd, popcon) Reported by: Nico Golde <nion@debianorg> Date: Thu, 7 Feb 20 ...

source: wwwsecurityfocuscom/bid/27499/info MPlayer is prone to a remote code-execution vulnerability because it fails to sanitize certain 'MOV' file tags before using them to index heap memory An attacker can exploit this issue to execute arbitrary code, which can result in the complete compromise of the computer Failed exploit attempt ...

CWE-189 http://www.securityfocus.com/bid/27499 http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060032.html http://www.coresecurity.com/?action=item&id=2102 http://www.mplayerhq.hu/design7/news.html http://www.securitytracker.com/id?1019299 http://secunia.com/advisories/28779 http://www.debian.org/security/2008/dsa-1496 http://secunia.com/advisories/28956 http://www.mandriva.com/security/advisories?name=MDVSA-2008:045 http://secunia.com/advisories/28955 http://security.gentoo.org/glsa/glsa-200803-16.xml http://secunia.com/advisories/29307 http://securityreason.com/securityalert/3607 http://www.vupen.com/english/advisories/2008/0406/references http://www.securityfocus.com/archive/1/487500/100/0/threaded https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=464533 https://www.exploit-db.com/exploits/31076/

CVE-2008-0485

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect