Array index vulnerability in libmpdemux/demux_audio.c in MPlayer 1.0rc2 and SVN before r25917, and possibly earlier versions, as used in…

Description

Array index vulnerability in libmpdemux/demux_audio.c in MPlayer 1.0rc2 and SVN before r25917, and possibly earlier versions, as used in Xine-lib 1.1.10, might allow remote attackers to execute arbitrary code via a crafted FLAC tag, which triggers a buffer overflow.

Scores

EPSS (exploitation in 30 days)

5.4% · top 7.3% of all CVEs (2 Nov 2026)

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.

Weakness

• n/a
• CWE-189 (opens in a new tab)

Affected products

• n/a

  • affected n/a

References (33)

• 3608 (opens in a new tab)third-party-advisoryx_refsource_SREASONx_transferred
• 28989 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• ADV-2008-0406 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• 20080204 CORE-2007-1218: MPlayer 1.0rc2 buffer overflow vulnerability (opens in a new tab)mailing-listx_refsource_FULLDISCx_transferred
• 28918 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• ADV-2008-0421 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• 20080204 CORE-2007-1218: MPlayer 1.0rc2 buffer overflow vulnerability (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
• http://www.mplayerhq.hu/design7/news.html (opens in a new tab)x_refsource_CONFIRMx_transferred
• MDVSA-2008:046 (opens in a new tab)vendor-advisoryx_refsource_MANDRIVAx_transferred
• MDVSA-2008:045 (opens in a new tab)vendor-advisoryx_refsource_MANDRIVAx_transferred
• 28955 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 28779 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• http://www.coresecurity.com/?action=item&id=2103 (opens in a new tab)x_refsource_MISCx_transferred
• 29307 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 31393 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• https://bugzilla.redhat.com/show_bug.cgi?id=431541 (opens in a new tab)x_refsource_CONFIRMx_transferred
• GLSA-200802-12 (opens in a new tab)vendor-advisoryx_refsource_GENTOOx_transferred
• 29601 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• DSA-1496 (opens in a new tab)vendor-advisoryx_refsource_DEBIANx_transferred
• SUSE-SR:2008:006 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
• 29141 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• GLSA-200803-16 (opens in a new tab)vendor-advisoryx_refsource_GENTOOx_transferred
• FEDORA-2008-1581 (opens in a new tab)vendor-advisoryx_refsource_FEDORAx_transferred
• 29323 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• FEDORA-2008-1543 (opens in a new tab)vendor-advisoryx_refsource_FEDORAx_transferred
• 28956 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• DSA-1536 (opens in a new tab)vendor-advisoryx_refsource_DEBIANx_transferred
• 27441 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
• http://sourceforge.net/project/shownotes.php?group_id=9655&release_id=574735 (opens in a new tab)x_refsource_CONFIRMx_transferred
• http://bugs.gentoo.org/show_bug.cgi?id=209106 (opens in a new tab)x_refsource_CONFIRMx_transferred
• http://bugs.xine-project.org/show_bug.cgi?id=38 (opens in a new tab)x_refsource_CONFIRMx_transferred
• 28801 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• USN-635-1 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Record last updated 7 Aug 2024, 07:46 UTC.