CVE-2006-6172: Buffer Overflow
Buffer overflow in the asmrpeval function in the RealMedia RTSP stream handler (asmrp.c) for Real Media input plugin, as used in (1) xine/xine-lib, (2) MPlayer 1.0rc1 and earlier, and possibly others, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a rulebook with a large number of rulematches.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2006-6172?
CVE-2006-6172 is classified as a critical vulnerability due to its potential to cause denial of service and execute arbitrary code.
How do I fix CVE-2006-6172?
To mitigate CVE-2006-6172, update to patched versions of the affected software such as MPlayer newer than 1.0rc1 or the latest xine Real Media input plugin.
Which software is affected by CVE-2006-6172?
CVE-2006-6172 affects MPlayer version 1.0rc1 and earlier, as well as the Real Media input plugin in xine.
What type of vulnerability is CVE-2006-6172?
CVE-2006-6172 is a buffer overflow vulnerability that can lead to denial of service and potential remote code execution.
Can CVE-2006-6172 be exploited remotely?
Yes, CVE-2006-6172 can be exploited by remote attackers through the RealMedia RTSP stream.