GCVE - cpe:2.3:a:mplayer:mplayer:1.0_rc1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:mplayer:mplayer:1.0_rc1:*:*:*:*:*:*:*

part: a version: 1.0_rc1 update: *

Vendor	Mplayer (`2dc4d336-fe9f-5ce7-b3eb-ac1b501956b6`)
Product	Mplayer (`984c0e51-faa0-5bb6-879c-c491cf971634`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-3827`	vulnerable	2026-06-08 04:50:36.668554	Details available Multiple integer underflows in the Real demuxer (demux_real.c) in MPlayer 1.0_rc2 and earlier allow remote attackers to cause a denial of service (process termination) and possibly execute arbitrary code via a crafted video file that causes the stream_read function to read or write arbitrary memory. Published: 2008-09-29T19:00:00.000Z Updated: 2024-08-07T09:53:00.387Z Open on db.gcve.eu Reference links http://www.ocert.org/advisories/ocert-2008-013.html http://securityreason.com/securityalert/4326 http://secunia.com/advisories/32045 http://www.securityfocus.com/bid/31473 http://www.vupen.com/english/advisories/2008/2703	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-4938`	vulnerable	2026-06-08 04:49:57.505868	Details available Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a .avi file with certain large "indx truck size" and nEntriesInuse values, and a certain wLongsPerEntry value. Published: 2007-09-18T19:00:00.000Z Updated: 2024-08-07T15:17:27.081Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/25648 http://securityreason.com/securityalert/3144 https://exchange.xforce.ibmcloud.com/vulnerabilities/36581 http://www.securityfocus.com/archive/1/479222/100/0/threaded http://secunia.com/advisories/27016	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-2948`	vulnerable	2026-06-08 04:49:46.538052	Details available Multiple stack-based buffer overflows in stream/stream_cddb.c in MPlayer before 1.0rc1try3 allow remote attackers to execute arbitrary code via a CDDB entry with a long (1) album title or (2) category. Published: 2007-06-07T21:00:00.000Z Updated: 2024-08-07T13:57:54.895Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/34749 http://secunia.com/advisories/26083 http://www.mandriva.com/security/advisories?name=MDKSA-2007:143 http://www.mplayerhq.hu/design7/news.html http://secunia.com/advisories/24302	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.