Mandriva update for mplayer
Secunia Advisory: SA28955
Release Date: 2008-02-15
Last Update: 2008-02-20
Popularity: 3,228 views

Critical:
Highly critical
Impact: System access
Where: From remote
Solution Status: Vendor Patch


Subscribe: Instant alerts on relevant vulnerabilities

CVE reference:CVE-2008-0225
CVE-2008-0238
CVE-2008-0485
CVE-2008-0486
CVE-2008-0629
CVE-2008-0630


Description:
Mandriva has issued an update for mplayer. This fixes some vulnerabilities, which can be exploited by malicious people to compromise a user's system.

For more information:
SA28384
SA28779

Solution:
Apply updated packages.

-- Mandriva Linux 2007.1 --

bc4d94bebd6e6d3f5ae8939c2a6eae17 2007.1/i586/libdha1.0-1.0-1.rc1.11.5mdv2007.1.i586.rpm
7b01d664225bcb1bd474dfd97d3e50a3 2007.1/i586/mencoder-1.0-1.rc1.11.5mdv2007.1.i586.rpm
b1258431ee88be325c9c407b0ae238ae 2007.1/i586/mplayer-1.0-1.rc1.11.5mdv2007.1.i586.rpm
9ac91fe253b625a24f03613912eaf905 2007.1/i586/mplayer-doc-1.0-1.rc1.11.5mdv2007.1.i586.rpm
e674dc2f80cfb01a3d58e1f323bf028e 2007.1/i586/mplayer-gui-1.0-1.rc1.11.5mdv2007.1.i586.rpm
f6c93fbb2298603dcadfcc199e920f4c 2007.1/SRPMS/mplayer-1.0-1.rc1.11.5mdv2007.1.src.rpm

-- Mandriva Linux 2007.1/X86_64 --

8e8356ef4f1d82350b2ec4603e9c97ab 2007.1/x86_64/mencoder-1.0-1.rc1.11.5mdv2007.1.x86_64.rpm
24cbb105fc1b2d538a291635af1175f5 2007.1/x86_64/mplayer-1.0-1.rc1.11.5mdv2007.1.x86_64.rpm
270d9a22d97b311808be80b25b9e0d46 2007.1/x86_64/mplayer-doc-1.0-1.rc1.11.5mdv2007.1.x86_64.rpm
b895f7c06b55b182aef4a077f842574f 2007.1/x86_64/mplayer-gui-1.0-1.rc1.11.5mdv2007.1.x86_64.rpm
f6c93fbb2298603dcadfcc199e920f4c 2007.1/SRPMS/mplayer-1.0-1.rc1.11.5mdv2007.1.src.rpm

Changelog:
2008-02-20: Removed Mandriva Linux 2007.0 from the list of affected products.

Original Advisory:
http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:045

Other References:
SA28384:
http://secunia.com/advisories/28384/

SA28779:
http://secunia.com/advisories/28779/


Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
  
Latest Advisories

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1. Microsoft Office Two Code Execution Vulnerabilities // 23 views
2. PHP Multiple Vulnerabilities // 21 views
3. Microsoft Word Malformed Object Pointer Vulnerability // 21 views
4. phpBB "gen_rand_string()" Predictable RNG Weakness // 15 views
5. 3Com Wireless 8760 Access Point HTTP Request Processing Denial of Service // 13 views
6. Drupal Content Construction Kit Script Insertion Vulnerabilities // 13 views
7. XASTIR Insecure Temporary Files // 12 views
8. phpBB Cross Site Scripting and Unspecified Vulnerabilities // 11 views
9. Netgear WN802T Wireless Access Point Two Vulnerabilities // 11 views
10. Fedora update for xastir // 11 views