REDHAT-BUG-431541: Buffer Overflow
Common Vulnerabilities and Exposures assigned an identifier CVE-2008-0486 to the following vulnerability:
Array index vulnerability in libmpdemux/demuxaudio.c in MPlayer 1.0rc2 and SVN before r25917, and possibly earlier versions, as used in Xine-lib 1.1.10, might allow remote attackers to execute arbitrary code via a crafted FLAC tag, which triggers a buffer overflow.
References: http://www.securityfocus.com/archive/1/archive/1/487501/100/0/threaded http://www.coresecurity.com/?action=item&id=2103 http://www.securityfocus.com/bid/27441
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-431541?
The severity of REDHAT-BUG-431541 is classified as moderate due to the potential for array index vulnerabilities in affected versions.
How do I fix REDHAT-BUG-431541?
To fix REDHAT-BUG-431541, update MPlayer to version 1.0rc2 or a later release to mitigate the vulnerability.
What software is affected by REDHAT-BUG-431541?
MPlayer versions before 1.0rc2 and possibly earlier versions, as well as Xine-lib, are affected by REDHAT-BUG-431541.
What is the nature of the vulnerability described in REDHAT-BUG-431541?
The vulnerability in REDHAT-BUG-431541 involves an array index vulnerability in the audio demuxer of MPlayer.
Is there a CVE associated with REDHAT-BUG-431541?
Yes, REDHAT-BUG-431541 is associated with the CVE ID CVE-2008-0486.