mplayer vulnerabilities

Recent CVEs affecting mplayer products. 29 tracked.

mplayer has 29 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 13. Most recent: 2011-05-20. Highest priority: CVE-2004-0386 (score 70/100).

• CVE-2011-0723 MEDIUM 6.8 DOWNGRADE MITIGATE FFmpeg 0.5.x, as used in MPlayer and other products, allows remote attackers to cause a denial of service (app
• CVE-2008-5616 HIGH 10.0 UPGRADE Stack-based buffer overflow in the demux_open_vqf function in libmpdemux/demux_vqf.c in MPlayer 1.0 rc2 before
• CVE-2008-4610 MEDIUM 5.0 UPGRADE MPlayer allows remote attackers to cause a denial of service (application crash) via (1) a malformed AAC file,
• CVE-2008-3827 HIGH 9.3 UPGRADE Multiple integer underflows in the Real demuxer (demux_real.c) in MPlayer 1.0_rc2 and earlier allow remote att
• CVE-2008-1558 HIGH 10.0 DOWNGRADE Uncontrolled array index in the sdpplin_parse function in stream/realrtsp/sdpplin.c in MPlayer 1.0 rc2 allows
• CVE-2008-0630 MEDIUM 6.8 DOWNGRADE Buffer overflow in url.c in MPlayer 1.0rc2 and SVN before r25823 allows remote attackers to execute arbitrary
• CVE-2008-0629 MEDIUM 4.3 DOWNGRADE Buffer overflow in stream_cddb.c in MPlayer 1.0rc2 and SVN before r25824 allows remote user-assisted attackers
• CVE-2008-0486 HIGH 7.5 DOWNGRADE DOWNGRADE Array index vulnerability in libmpdemux/demux_audio.c in MPlayer 1.0rc2 and SVN before r25917, and possibly ea
• CVE-2008-0485 HIGH 9.3 UPGRADE Array index error in libmpdemux/demux_mov.c in MPlayer 1.0 rc2 and earlier might allow remote attackers to exe
• CVE-2007-6718 MEDIUM 4.3 UPGRADE MPlayer, possibly 1.0rc1, allows remote attackers to cause a denial of service (SIGSEGV and application crash)
• CVE-2007-4938 HIGH 7.6 DOWNGRADE MITIGATE Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to
• CVE-2007-2948 HIGH 9.3 DOWNGRADE Multiple stack-based buffer overflows in stream/stream_cddb.c in MPlayer before 1.0rc1try3 allow remote attack
• CVE-2007-1387 MEDIUM 6.8 UPGRADE The DirectShow loader (loader/dshow/DS_VideoDecoder.c) in MPlayer 1.0rc1 and earlier, as used in xine-lib, doe
• CVE-2007-1246 HIGH 7.6 UPGRADE The DMO_VideoDecoder_Open function in loader/dmo/DMO_VideoDecoder.c in MPlayer 1.0rc1 and earlier, as used in
• CVE-2006-6172 HIGH 7.5 UPGRADE MITIGATE Buffer overflow in the asmrp_eval function in the RealMedia RTSP stream handler (asmrp.c) for Real Media input
• CVE-2006-1502 MEDIUM 5.1 UPGRADE Multiple integer overflows in MPlayer 1.0pre7try2 allow remote attackers to cause a denial of service and trig
• CVE-2006-0579 HIGH 7.5 UPGRADE Multiple integer overflows in (1) the new_demux_packet function in demuxer.h and (2) the demux_asf_read_packet
• CVE-2005-2718 HIGH 7.5 UPGRADE Buffer overflow in ad_pcm.c in MPlayer 1.0pre7 and earlier allows remote attackers to execute arbitrary code v
• CVE-2005-1195 HIGH 7.5 UPGRADE DOWNGRADE Multiple heap-based buffer overflows in the code used to handle (1) MMS over TCP (MMST) streams or (2) RealMed
• CVE-2004-1311 HIGH 10.0 DOWNGRADE Integer overflow in the real_setup_and_get_header function in real.c for Unix MPlayer 1.0pre5 allows remote at
• CVE-2004-1310 HIGH 10.0 DOWNGRADE Stack-based buffer overflow in the asf_mmst_streaming.c functionality for MPlayer 1.0pre5 allows remote attack
• CVE-2004-1309 HIGH 10.0 DOWNGRADE Heap-based buffer overflow in the demux_open_bmp function in demux_bmp.c for Unix MPlayer 1.0pre5 allows remot
• CVE-2004-1285 HIGH 10.0 DOWNGRADE Buffer overflow in the get_header function in asf_mmst_streaming.c for MPlayer 1.0pre5 allows remote attackers
• CVE-2004-1188 HIGH 10.0 DOWNGRADE DOWNGRADE The pnm_get_chunk function in xine 0.99.2 and earlier, and other packages such as MPlayer that use the same co
• CVE-2004-1187 HIGH 10.0 DOWNGRADE DOWNGRADE Heap-based buffer overflow in the pnm_get_chunk function for xine 0.99.2, and other packages such as MPlayer t
• CVE-2004-0659 HIGH 10.0 DOWNGRADE Buffer overflow in TranslateFilename for common.c in MPlayer 1.0pre4 allows remote attackers to execute arbitr
• CVE-2004-0433 HIGH 10.0 DOWNGRADE DOWNGRADE Multiple buffer overflows in the Real-Time Streaming Protocol (RTSP) client for (1) MPlayer before 1.0pre4 and
• CVE-2004-0386 HIGH 10.0 DOWNGRADE MITIGATE Buffer overflow in the HTTP parser for MPlayer 1.0pre3 and earlier, 0.90, and 0.91 allows remote attackers to
• CVE-2003-0835 HIGH 7.5 DOWNGRADE Multiple buffer overflows in asf_http_request of MPlayer before 0.92 allows remote attackers to execute arbitr

FAQ

How do I fix mplayer vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is mplayer being exploited right now?

None of the tracked mplayer CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which mplayer CVE should I patch first?

CVE-2004-0386 currently ranks highest (70/100): Buffer overflow in the HTTP parser for MPlayer 1.0pre3 and earlier, 0.90, and 0.91 allows remote attackers to .

Products

• mplayer
• unix mplayer

RSS feed for mplayer · ← Back to latest CVEs