FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2008-0485

This CVE name corresponds to:

Entered	Topic
2008-03-06	mplayer -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2008-0485 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2008-0485
Phase	Assigned(20080129)

Description

Array index error in libmpdemux/demux_mov.c in MPlayer 1.0 rc2 and earlier might allow remote attackers to execute arbitrary code via a QuickTime MOV file with a crafted stsc atom tag.

References

Source	Reference
BUGTRAQ	20080204 CORE-2008-0122: MPlayer arbitrary pointer dereference
FULLDISC	20080204 CORE-2008-0122: MPlayer arbitrary pointer dereference
MISC	http://www.coresecurity.com/?action=item&id=2102
CONFIRM	http://www.mplayerhq.hu/design7/news.html
DEBIAN	DSA-1496
GENTOO	GLSA-200803-16
MANDRIVA	MDVSA-2008:045
BID	27499
FRSIRT	ADV-2008-0406
SECTRACK	1019299
SECUNIA	28779
SECUNIA	28956
SECUNIA	28955
SECUNIA	29307
SREASON	3607