xfocus has reported some vulnerabilities in MPlayer, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially to compromise a user's system.

The vulnerabilities are caused due to integer overflow errors in "libmpdemux/asfheader.c" within the handling of an ASF file, and in "libmpdemux/aviheader.c" when parsing the "indx" chunk in an AVI file. This can be exploited to cause heap-based buffer overflows via a malicious ASF file, or via a AVI file with specially-crafted "wLongsPerEntry" and "nEntriesInUse" values in the "indx" chunk.

The vulnerability affects version 1.0pre7try2. Other version may also be affected.

Solution
Do not open media files from untrusted sources.

Provided and/or discovered by
xfocus

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044615.html

Deep Links
Links available to Secunia VIM customers