CVE-2008-1558: Integer Overflow
Published Mar 31, 2008
·Updated
Uncontrolled array index in the sdpplinparse function in stream/realrtsp/sdpplin.c in MPlayer 1.0 rc2 allows remote attackers to overwrite memory and execute arbitrary code via a large streamid SDP parameter. NOTE: this issue has been referred to as an integer overflow.
Affected Software
1 affected component
MPlayer MPlayer=1.0_rc2
Event History
Mar 31, 2008
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-1558?
CVE-2008-1558 has a high severity rating due to its potential to allow remote code execution.
2
How do I fix CVE-2008-1558?
To fix CVE-2008-1558, update MPlayer to a version that has addressed this vulnerability.
3
What type of attack does CVE-2008-1558 enable?
CVE-2008-1558 enables remote attackers to execute arbitrary code on the affected system.
4
Which version of MPlayer is affected by CVE-2008-1558?
CVE-2008-1558 specifically affects MPlayer version 1.0 rc2.
5
What is the cause of CVE-2008-1558?
CVE-2008-1558 is caused by an uncontrolled array index in the sdpplin_parse function leading to memory overwrite.