CVE-2007-2948

概要

参考情報

• lists.mplayerhq.hu/pipermail/mplayer-announce/2007-June/000066.html · Patch
• osvdb.org/36991
• secunia.com/advisories/24302 · Patch
• secunia.com/advisories/25713
• secunia.com/advisories/25940
• secunia.com/advisories/26083
• secunia.com/advisories/26207
• secunia.com/secunia_research/2007-55
• security.gentoo.org/glsa/glsa-200707-07.xml
• svn.mplayerhq.hu/mplayer/trunk/stream/stream_cddb.c
• debian.org/security/2007/dsa-1313
• mandriva.com/security/advisories
• mplayerhq.hu/design7/news.html
• novell.com/linux/security/advisories/2007_14_sr.html
• securityfocus.com/bid/24339
• vupen.com/english/advisories/2007/2080
• exchange.xforce.ibmcloud.com/vulnerabilities/34749

mplayer のその他の脆弱性

• CVE-2008-5616緊急 10.0Stack-based buffer overflow in the demux_open_vqf function in libmpdemux/demux_vqf.c in MPlayer 1.0 rc2 before r28150 allows remote attacker…
• CVE-2008-4610中 5.0MPlayer allows remote attackers to cause a denial of service (application crash) via (1) a malformed AAC file, as demonstrated by lol-vlc.aa…
• CVE-2007-6718中 4.3MPlayer, possibly 1.0rc1, allows remote attackers to cause a denial of service (SIGSEGV and application crash) via (1) a malformed MP3 file,…
• CVE-2008-3827緊急 9.3Multiple integer underflows in the Real demuxer (demux_real.c) in MPlayer 1.0_rc2 and earlier allow remote attackers to cause a denial of se…
• CVE-2008-1558緊急 10.0Uncontrolled array index in the sdpplin_parse function in stream/realrtsp/sdpplin.c in MPlayer 1.0 rc2 allows remote attackers to overwrite …