REDHAT-BUG-431541: Buffer Overflow
First published: Tue Feb 05 2008(Updated: )
Common Vulnerabilities and Exposures assigned an identifier <a href="https://access.redhat.com/security/cve/CVE-2008-0486">CVE-2008-0486</a> to the following vulnerability: Array index vulnerability in libmpdemux/demux_audio.c in MPlayer 1.0rc2 and SVN before r25917, and possibly earlier versions, as used in Xine-lib 1.1.10, might allow remote attackers to execute arbitrary code via a crafted FLAC tag, which triggers a buffer overflow. References: <a href="http://www.securityfocus.com/archive/1/archive/1/487501/100/0/threaded">http://www.securityfocus.com/archive/1/archive/1/487501/100/0/threaded</a> <a href="http://www.coresecurity.com/?action=item&id=2103">http://www.coresecurity.com/?action=item&id=2103</a> <a href="http://www.securityfocus.com/bid/27441">http://www.securityfocus.com/bid/27441</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| MPlayer | <1.0rc2 | |
| xine xine-lib |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://access.redhat.com/security/cve/CVE-2008-0486
- http://www.securityfocus.com/archive/1/archive/1/487501/100/0/threaded
- http://www.coresecurity.com/?action=item&id=2103
- http://www.securityfocus.com/bid/27441
- http://svn.mplayerhq.hu/mplayer/trunk/libmpdemux/demux_audio.c?r1=25911&r2=25917
- http://bugs.xine-project.org/show_bug.cgi?id=38
- https://admin.fedoraproject.org/updates/F7/FEDORA-2008-1581
- https://admin.fedoraproject.org/updates/F8/FEDORA-2008-1543
- https://bugzilla.redhat.com/show_bug.cgi?id=431541
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2008-0486
- agent/references
- agent/weakness
- agent/severity
- agent/description
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/mplayer
- canonical/mplayer
- vendor/xine
- canonical/xine xine-lib