ByteOS Network

NVD Vulnerability Details :

CVE-2008-5616

Modified

Source-cve@mitre.org

Published At-17 Dec, 2008 | 01:30

Updated At-11 Oct, 2018 | 20:56

Stack-based buffer overflow in the demux_open_vqf function in libmpdemux/demux_vqf.c in MPlayer 1.0 rc2 before r28150 allows remote attackers to execute arbitrary code via a malformed TwinVQ file.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

mplayer>>mplayer>>Versions up to 1.0_rc1(inclusive)

cpe:2.3:a:mplayer:mplayer:*:*:*:*:*:*:*:*

mplayer>>mplayer>>0.90

cpe:2.3:a:mplayer:mplayer:0.90:*:*:*:*:*:*:*

mplayer>>mplayer>>0.90_pre

cpe:2.3:a:mplayer:mplayer:0.90_pre:*:*:*:*:*:*:*

mplayer>>mplayer>>0.90_rc

cpe:2.3:a:mplayer:mplayer:0.90_rc:*:*:*:*:*:*:*

mplayer>>mplayer>>0.90_rc4

cpe:2.3:a:mplayer:mplayer:0.90_rc4:*:*:*:*:*:*:*

mplayer>>mplayer>>0.91

cpe:2.3:a:mplayer:mplayer:0.91:*:*:*:*:*:*:*

mplayer>>mplayer>>0.92

cpe:2.3:a:mplayer:mplayer:0.92:*:*:*:*:*:*:*

mplayer>>mplayer>>0.92.1

cpe:2.3:a:mplayer:mplayer:0.92.1:*:*:*:*:*:*:*

mplayer>>mplayer>>0.92_cvs

cpe:2.3:a:mplayer:mplayer:0.92_cvs:*:*:*:*:*:*:*

mplayer>>mplayer>>1.0_pre1

cpe:2.3:a:mplayer:mplayer:1.0_pre1:*:*:*:*:*:*:*

mplayer>>mplayer>>1.0_pre2

cpe:2.3:a:mplayer:mplayer:1.0_pre2:*:*:*:*:*:*:*

mplayer>>mplayer>>1.0_pre3

cpe:2.3:a:mplayer:mplayer:1.0_pre3:*:*:*:*:*:*:*

mplayer>>mplayer>>1.0_pre3try2

cpe:2.3:a:mplayer:mplayer:1.0_pre3try2:*:*:*:*:*:*:*

mplayer>>mplayer>>1.0_pre4

cpe:2.3:a:mplayer:mplayer:1.0_pre4:*:*:*:*:*:*:*

mplayer>>mplayer>>1.0_pre5

cpe:2.3:a:mplayer:mplayer:1.0_pre5:*:*:*:*:*:*:*

mplayer>>mplayer>>1.0_pre5try1

cpe:2.3:a:mplayer:mplayer:1.0_pre5try1:*:*:*:*:*:*:*

mplayer>>mplayer>>1.0_pre5try2

cpe:2.3:a:mplayer:mplayer:1.0_pre5try2:*:*:*:*:*:*:*

mplayer>>mplayer>>1.0_pre6

cpe:2.3:a:mplayer:mplayer:1.0_pre6:*:*:*:*:*:*:*

mplayer>>mplayer>>1.0_pre7

cpe:2.3:a:mplayer:mplayer:1.0_pre7:*:*:*:*:*:*:*

mplayer>>mplayer>>1.0_pre7try2

cpe:2.3:a:mplayer:mplayer:1.0_pre7try2:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-119	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://secunia.com/advisories/33136	cve@mitre.org	Vendor Advisory
http://secunia.com/advisories/34845	cve@mitre.org	N/A
http://svn.mplayerhq.hu/mplayer/branches/1.0rc2/libmpdemux/demux_vqf.c?r1=24723&r2=28150&pathrev=28150	cve@mitre.org	N/A
http://svn.mplayerhq.hu/mplayer/branches/1.0rc2/libmpdemux/demux_vqf.c?view=log&pathrev=28150#rev28150	cve@mitre.org	N/A
http://trapkit.de/advisories/TKADV2008-014.txt	cve@mitre.org	N/A
http://www.debian.org/security/2009/dsa-1782	cve@mitre.org	N/A
http://www.mandriva.com/security/advisories?name=MDVSA-2009:013	cve@mitre.org	N/A
http://www.mandriva.com/security/advisories?name=MDVSA-2009:014	cve@mitre.org	N/A
http://www.securityfocus.com/archive/1/499214/100/0/threaded	cve@mitre.org	N/A
http://www.securityfocus.com/bid/32822	cve@mitre.org	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History