PatchTheCVECVE-2006-1502: Multiple integer overflows in MPlayer 1.0pre7try2 allow remote attackers to cause a denial of service and trig
CVE-2006-1502 is a medium-severity flaw (CVSS 5.1) affecting mplayer. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Multiple integer overflows in MPlayer 1.0pre7try2 allow remote attackers to cause a denial of service and trigger heap-based buffer overflows via (1) a certain ASF file handled by asfheader.c that causes the asf_descrambling function to be passed a negative integer after the conversion from a char to an int or (2) an AVI file with a crafted wLongsPerEntry or nEntriesInUse value in the indx chunk, which is handled in aviheader.c.
Why this priority
- No elevated risk signals yet
A fixed release or distro patch exists.
Risk facts
| CVSS score | 5.1 (Medium) |
| EPSS exploit chance | 3.5% (top 11%) |
| CISA exploited list | No |
| Published | 2006-03-30 |
| Last modified | 2026-06-16 |
Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2006-1502?
mplayer: upgrade to newer than 1.0_pre7try2. Exact commands for each OS are on this page.
Is CVE-2006-1502 being exploited?
CVE-2006-1502 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2006-1502 affect?
CVE-2006-1502 affects mplayer. Severity is medium (CVSS 5.1). Multiple integer overflows in MPlayer 1.0pre7try2 allow remote attackers to cause a denial of service and trigger heap-based buffer overflows via (1) a certain ASF file handled by asfheader.c that causes the asf_descrambling function to be
How urgent is CVE-2006-1502?
Priority 40/100. No elevated risk signals yet.
Related CVEs
- CVE-2022-38866 MEDIUM 5.5 DOWNGRADE DOWNGRADE Certain The MPlayer Project products are vulnerable to Buffer Overflow via read_avi_header() of libmpdemux/avi
- CVE-2022-38865 MEDIUM 5.5 DOWNGRADE DOWNGRADE Certain The MPlayer Project products are vulnerable to Divide By Zero via the function demux_avi_read_packet o
- CVE-2022-38864 MEDIUM 5.5 DOWNGRADE DOWNGRADE Certain The MPlayer Project products are vulnerable to Buffer Overflow via the function mp_unescape03() of lib
- CVE-2022-38863 MEDIUM 5.5 DOWNGRADE DOWNGRADE Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mp_getbits() of libmpdemux
- CVE-2022-38862 HIGH 7.8 DOWNGRADE DOWNGRADE Certain The MPlayer Project products are vulnerable to Buffer Overflow via function play() of libaf/af.c:639