Description: Multiple vulnerabilities have been reported in MPlayer, which can be exploited by malicious people to compromise a user's system.
1) An integer overflow in the "real_setup_and_get_header()" function when processing RTSP streams can be exploited to cause a heap-based buffer overflow by passing an extremely large "Content-Length" for a stream.
2) Boundary errors in some functions within the MMST streaming code can be exploited to cause stack-based buffer overflows via a specially crafted files.
3) A boundary error in the "demux_open_bmp()" function when parsing bitmaps can be exploited to cause a heap-based buffer overflow via a specially crafted bitmap image containing an overly large value in the "biClrUsed" field.
4) An unspecified boundary error within the PNM streaming code can be exploited to cause a heap-based buffer overflow.
5) An unspecified boundary error within mp3lib can be exploited to cause a buffer overflow.
The vulnerabilities have been reported in version 1.0pre5 and the CVS version. Prior versions may also be affected.
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.
Ideas, suggestions, and other feedback are most welcome.
