Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

mplayer: arbitrary code execution

Package(s):

mplayer

CVE #(s):

CVE-2008-1558

Created:

April 21, 2008

Updated:

September 16, 2008

Description:

From the Debian advisory:

It was discovered that the MPlayer movie player performs insufficient input sanitising on SDP session data, leading to potential execution of arbitrary code through a malformed multimedia stream.

Alerts:

Mandriva	MDVSA-2008:196	2008-09-15
Gentoo	200805-22	2008-05-29
Debian	DSA-1552-1	2008-04-19

(Log in to post comments)