Mplayer SVN-r38374-13.0.1 is vulnerable to Memory Leak via vf.c and vfvo.c.
Certain The MPlayer Project products are vulnerable to Buffer Overflow via readaviheader() of libmpdemux/aviheader.c . This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.
Certain The MPlayer Project products are vulnerable to Buffer Overflow via function genshvideo () of mplayer/libmpdemux/demuxmov.c. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.
Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mpgetbits() of libmpdemux/mpeghdr.c which affects mencoder and mplayer. This affects mecoder SVN-r38374-13.0.1 and mplayer SVN-r38374-13.0.1.
Certain The MPlayer Project products are vulnerable to Buffer Overflow via function movbuildindex() of libmpdemux/demuxmov.c. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.
Certain The MPlayer Project products are vulnerable to Out-of-bounds Read via function readmetarecord() of mplayer/libmpdemux/asfheader.c. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.
Certain The MPlayer Project products are vulnerable to Divide By Zero via the function demuxavireadpacket of libmpdemux/demuxavi.c. This affects mplyer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.
Certain The MPlayer Project products are vulnerable to Divide By Zero via function demuxopenavi() of libmpdemux/demuxavi.c which affects mencoder. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.
Certain The MPlayer Project products are vulnerable to Buffer Overflow via the function mpunescape03() of libmpdemux/mpeghdr.c. This affects mencoder SVN-r38374-13.0.1 and mplayer SVN-r38374-13.0.1.
The MPlayer Project mplayer SVN-r38374-13.0.1 is vulnerable to memory corruption via function freempimage() of libmpcodecs/mpimage.c.
The MPlayer Project v1.5 was discovered to contain a heap use-after-free resulting in a double free in the preinit function at libvo/vov4l2.c. This vulnerability can lead to a Denial of Service (DoS) via a crafted file. The device=strdup statement is not executed on every call.
M-Player 0.4 allows remote attackers to cause a denial of service (crash) via a crafted MP3 file.