Some vulnerabilities have been reported in MPlayer and xine-lib, potentially allowing malicious people to compromise a vulnerable system.

1) The vulnerability is caused due to a boundary error, which can be triggered by supplying a long URL. This can be exploited to cause a buffer overflow.

2) The vulnerability is caused due to a boundary error, which can be triggered by a malicious RTSP server during session negotiation. This can be exploited to cause a buffer overflow.

3) The vulnerability is caused due to a boundary error, which can be triggered by a malicious RTSP server by sending malicious RDT (Real Data Transport) packets. This can be exploited to cause a buffer overflow.

Successful exploitation may potentially allow execution of arbitrary code on a user's system but requires that the user is either tricked into connecting to a malicious RTSP server, open a malicious play list, or open a malicious URL.

The following versions have been reported vulnerable:
* MPlayer 1.0pre1 to pre3try2
* xine-lib 1-beta1 to 1-rc3c

Solution
The following MPlayer versions are not vulnerable:
Further details available to Secunia VIM customers

Provided and/or discovered by
Diego Biurrun
Miguel Freitas
Roberto Togni

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://xinehq.de/index.php/security/XSA-2004-3

Deep Links
Links available to Secunia VIM customers