| Package | Affected versions | Patched versions |
|---|---|---|
| mplayer | = 1.0_pre3try2 | |
| xine-lib | = 1_beta1= 1_beta10= 1_beta11= 1_beta2= 1_beta3= 1_beta4= 1_beta5= 1_beta6= 1_beta7= 1_beta8= 1_beta9= 1_rc2= 1_rc3a= 1_rc3b= 1_rc3c |
Multiple buffer overflows in the Real-Time Streaming Protocol (RTSP) client for (1) MPlayer before 1.0pre4 and (2) xine lib (xine-lib) before 1-rc4, when playing Real RTSP (realrtsp) streams, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (a) long URLs, (b) long Real server responses, or (c) long Real Data Transport (RDT) packets.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free