CVE-2004-0659: Buffer Overflow

Published Jul 13, 2004

Updated

Buffer overflow in TranslateFilename for common.c in MPlayer 1.0pre4 allows remote attackers to execute arbitrary code via a long file name.

Affected Software

14 affected components

MPlayer MPlayer=0.90

MPlayer MPlayer=0.90_pre

MPlayer MPlayer=0.90_rc

MPlayer MPlayer=0.90_rc4

MPlayer MPlayer=0.91

MPlayer MPlayer=0.92

MPlayer MPlayer=0.92.1

MPlayer MPlayer=0.92_cvs

MPlayer MPlayer=1.0_pre1

MPlayer MPlayer=1.0_pre2

MPlayer MPlayer=1.0_pre3

MPlayer MPlayer=1.0_pre3try2

MPlayer MPlayer=1.0_pre4

MPlayer MPlayer=head_cvs

Event History

Jul 13, 2004

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2004-0659?

CVE-2004-0659 has a critical severity rating due to its potential to allow remote attackers to execute arbitrary code.

How do I fix CVE-2004-0659?

To fix CVE-2004-0659, you should upgrade MPlayer to a version later than 1.0_pre4, which addresses this buffer overflow vulnerability.

What versions of MPlayer are affected by CVE-2004-0659?

CVE-2004-0659 affects MPlayer versions 0.90, 0.90_pre, 0.90_rc, 0.90_rc4, 0.91, 0.92, 0.92.1, 0.92_cvs, and 1.0_pre4.

Can CVE-2004-0659 be exploited remotely?

Yes, CVE-2004-0659 can be exploited remotely through specially crafted long file names.

What mitigation strategies exist for CVE-2004-0659?

Mitigation strategies for CVE-2004-0659 include ensuring that all instances of MPlayer are updated to the latest versions and restricting file name inputs where possible.