CVE-2008-0485

概要

参考情報

• lists.grok.org.uk/pipermail/full-disclosure/2008-February/060032.html
• secunia.com/advisories/28779
• secunia.com/advisories/28955
• secunia.com/advisories/28956
• secunia.com/advisories/29307
• security.gentoo.org/glsa/glsa-200803-16.xml
• securityreason.com/securityalert/3607
• coresecurity.com
• debian.org/security/2008/dsa-1496
• mandriva.com/security/advisories
• mplayerhq.hu/design7/news.html
• securityfocus.com/archive/1/487500/100/0/threaded
• securityfocus.com/bid/27499 · Exploit
• securitytracker.com/id
• vupen.com/english/advisories/2008/0406/references

mplayer のその他の脆弱性

• CVE-2008-5616緊急 10.0Stack-based buffer overflow in the demux_open_vqf function in libmpdemux/demux_vqf.c in MPlayer 1.0 rc2 before r28150 allows remote attacker…
• CVE-2008-4610中 5.0MPlayer allows remote attackers to cause a denial of service (application crash) via (1) a malformed AAC file, as demonstrated by lol-vlc.aa…
• CVE-2007-6718中 4.3MPlayer, possibly 1.0rc1, allows remote attackers to cause a denial of service (SIGSEGV and application crash) via (1) a malformed MP3 file,…
• CVE-2008-3827緊急 9.3Multiple integer underflows in the Real demuxer (demux_real.c) in MPlayer 1.0_rc2 and earlier allow remote attackers to cause a denial of se…
• CVE-2008-1558緊急 10.0Uncontrolled array index in the sdpplin_parse function in stream/realrtsp/sdpplin.c in MPlayer 1.0 rc2 allows remote attackers to overwrite …