CVE-2008-0486 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2008-0486
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-0486

Description: Array index vulnerability in libmpdemux/demux_audio.c in MPlayer 1.0rc2 and SVN before r25917, and possibly earlier versions, as used in Xine-lib 1.1.10, might allow remote attackers to execute arbitrary code via a crafted FLAC tag, which triggers a buffer overflow.

CVE Status: Candidate

References: UBUNTU http://www.ubuntu.com/usn/usn-635-1 SUSE http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html SREASON http://securityreason.com/securityalert/3608 SAID Secunia Advisory: SA31393 Secunia Advisory: SA29601 Secunia Advisory: SA29323 Secunia Advisory: SA29307 Secunia Advisory: SA29141 Secunia Advisory: SA28956 Secunia Advisory: SA28955 Secunia Advisory: SA28989 Secunia Advisory: SA28801 Secunia Advisory: SA28918 Secunia Advisory: SA28779 MISC http://www.coresecurity.com/?action=item&id=2103 MANDRIVA http://www.mandriva.com/security/advisories?name=MDVSA-2008:045 http://www.mandriva.com/security/advisories?name=MDVSA-2008:046 GENTOO http://security.gentoo.org/glsa/glsa-200803-16.xml http://security.gentoo.org/glsa/glsa-200802-12.xml FULLDISC http://lists.grok.org.uk/pipermail/full-disclosure/2008-February/060033.html FEDORA DEBIAN http://www.debian.org/security/2008/dsa-1496 http://www.debian.org/security/2008/dsa-1536 CONFIRM http://bugs.gentoo.org/show_bug.cgi?id=209106 http://bugs.xine-project.org/show_bug.cgi?id=38 http://www.mplayerhq.hu/design7/news.html http://sourceforge.net/project/shownotes.php?group_id=9655&release_id=574735 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/487501/100/0/threaded BID 27441

Return to the previous page.