Mplayer : Security Vulnerabilities, CVEs, Published In 2006 (Denial of service)
Buffer overflow in the asmrp_eval function in the RealMedia RTSP stream handler (asmrp.c) for Real Media input plugin, as used in (1) xine/xine-lib, (2) MPlayer 1.0rc1 and earlier, and possibly others, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a rulebook with a large number of rulematches.
Max CVSS
7.5
EPSS Score
9.10%
Published
2006-11-30
Updated
2011-03-08
Multiple integer overflows in MPlayer 1.0pre7try2 allow remote attackers to cause a denial of service and trigger heap-based buffer overflows via (1) a certain ASF file handled by asfheader.c that causes the asf_descrambling function to be passed a negative integer after the conversion from a char to an int or (2) an AVI file with a crafted wLongsPerEntry or nEntriesInUse value in the indx chunk, which is handled in aviheader.c.
Max CVSS
5.1
EPSS Score
2.75%
Published
2006-03-30
Updated
2018-10-18
2 vulnerabilities found