Vulnerabilities > Mplayer > Mplayer > 1.0.rc1

DATE CVE VULNERABILITY TITLE RISK
2008-09-29 CVE-2008-3827 Numeric Errors vulnerability in Mplayer
Multiple integer underflows in the Real demuxer (demux_real.c) in MPlayer 1.0_rc2 and earlier allow remote attackers to cause a denial of service (process termination) and possibly execute arbitrary code via a crafted video file that causes the stream_read function to read or write arbitrary memory.
network
mplayer CWE-189
critical
9.3
2007-09-18 CVE-2007-4938 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in multiple products
Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a .avi file with certain large "indx truck size" and nEntriesInuse values, and a certain wLongsPerEntry value.
7.6
2007-06-07 CVE-2007-2948 CDDB Parsing Buffer Overflow vulnerability in Mplayer 1.0Rc1
Multiple stack-based buffer overflows in stream/stream_cddb.c in MPlayer before 1.0rc1try3 allow remote attackers to execute arbitrary code via a CDDB entry with a long (1) album title or (2) category.
network
mplayer
critical
9.3