mplayer: heap-based buffer overflow
| Package(s): | mplayer | CVE #(s): | CVE-2007-4938 | ||||
| Created: | October 2, 2007 | Updated: | October 3, 2007 | ||||
| Description: | A heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a .avi file with certain large "indx truck size" and nEntriesInuse values, and a certain wLongsPerEntry value. | ||||||
| Alerts: |
| ||||||