GCVE - cpe:2.3:a:mplayer:mplayer:0.90:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:mplayer:mplayer:0.90:*:*:*:*:*:*:*

part: a version: 0.90 update: *

Vendor	Mplayer (`2dc4d336-fe9f-5ce7-b3eb-ac1b501956b6`)
Product	Mplayer (`984c0e51-faa0-5bb6-879c-c491cf971634`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-5616`	vulnerable	2026-06-08 04:50:52.071968	Details available Stack-based buffer overflow in the demux_open_vqf function in libmpdemux/demux_vqf.c in MPlayer 1.0 rc2 before r28150 allows remote attackers to execute arbitrary code via a malformed TwinVQ file. Published: 2008-12-17T01:00:00.000Z Updated: 2024-08-07T10:56:47.334Z Open on db.gcve.eu Reference links http://secunia.com/advisories/34845 http://www.mandriva.com/security/advisories?name=MDVSA-2009:014 http://www.mandriva.com/security/advisories?name=MDVSA-2009:013 http://www.securityfocus.com/bid/32822 http://www.securityfocus.com/archive/1/499214/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-4610`	vulnerable	2026-06-08 04:50:47.249932	Details available MPlayer allows remote attackers to cause a denial of service (application crash) via (1) a malformed AAC file, as demonstrated by lol-vlc.aac; or (2) a malformed Ogg Media (OGM) file, as demonstrated by lol-ffplay.ogm, different vectors than CVE-2007-6718. Published: 2008-10-20T17:00:00.000Z Updated: 2024-08-07T10:24:20.689Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2008/10/07/1 http://www.ubuntu.com/usn/USN-734-1 http://secunia.com/advisories/34296	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-3827`	vulnerable	2026-06-08 04:50:36.658751	Details available Multiple integer underflows in the Real demuxer (demux_real.c) in MPlayer 1.0_rc2 and earlier allow remote attackers to cause a denial of service (process termination) and possibly execute arbitrary code via a crafted video file that causes the stream_read function to read or write arbitrary memory. Published: 2008-09-29T19:00:00.000Z Updated: 2024-08-07T09:53:00.387Z Open on db.gcve.eu Reference links http://www.ocert.org/advisories/ocert-2008-013.html http://securityreason.com/securityalert/4326 http://secunia.com/advisories/32045 http://www.securityfocus.com/bid/31473 http://www.vupen.com/english/advisories/2008/2703	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-6718`	vulnerable	2026-06-08 04:50:09.532708	Details available MPlayer, possibly 1.0rc1, allows remote attackers to cause a denial of service (SIGSEGV and application crash) via (1) a malformed MP3 file, as demonstrated by lol-mplayer.mp3; (2) a malformed Ogg Vorbis file, as demonstrated by lol-mplayer.ogg; (3) a malformed MPEG-1 file, as demonstrated by lol-mplayer.mpg; (4) a malformed MPEG-2 file, as demonstrated by lol-mplayer.m2v; (5) a malformed MPEG-4 AVI file, as demonstrated by lol-mplayer.avi; (6) a malformed FLAC file, as demonstrated by lol-mplayer.flac; (7) a malformed Ogg Theora file, as demonstrated by lol-mplayer.ogm; (8) a malformed WMV file, as demonstrated by lol-mplayer.wmv; or (9) a malformed AAC file, as demonstrated by lol-mplayer.aac. NOTE: vector 5 might overlap CVE-2007-4938, and vector 6 might overlap CVE-2008-0486. Published: 2008-10-20T17:00:00.000Z Updated: 2024-09-16T19:46:33.037Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2008/10/07/1 http://sam.zoy.org/blog/2007-01-16-exposing-file-parsing-vulnerabilities	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-1285`	vulnerable	2026-06-08 04:47:53.489227	Details available Buffer overflow in the get_header function in asf_mmst_streaming.c for MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a crafted ASF video stream. Published: 2004-12-22T05:00:00.000Z Updated: 2024-08-08T00:46:12.287Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/18631 http://tigger.uic.edu/~jlongs2/holes/mplayer.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-1188`	vulnerable	2026-06-08 04:47:53.300487	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-1187`	vulnerable	2026-06-08 04:47:53.276901	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0659`	vulnerable	2026-06-08 04:47:50.755745	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0386`	vulnerable	2026-06-08 04:47:49.652865	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-0835`	vulnerable	2026-06-08 04:47:22.658306	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.