CVE-2008-3827

Multiple integer underflows in the Real demuxer (demux_real.c) in MPlayer 1.0_rc2 and earlier allow remote attackers to cause a denial of service (process termination) and possibly execute arbitrary code via a crafted video file that causes the stream_read function to read or write arbitrary memory.

• mplayer mplayer (<= 1.0 rc2) • mplayer mplayer 0.90 • mplayer mplayer 0.90 pre • mplayer mplayer 0.90 rc • mplayer mplayer 0.90 rc4 • mplayer mplayer 0.91 • mplayer mplayer 0.92 • mplayer mplayer 0.92.1 • mplayer mplayer 0.92 cvs • mplayer mplayer 1.0 pre1 • mplayer mplayer 1.0 pre2 • mplayer mplayer 1.0 pre3 • mplayer mplayer 1.0 pre3try2 • mplayer mplayer 1.0 pre4 • mplayer mplayer 1.0 pre5 • mplayer mplayer 1.0 pre5try1 • mplayer mplayer 1.0 pre5try2 • mplayer mplayer 1.0 pre6 • mplayer mplayer 1.0 pre7 • mplayer mplayer 1.0 pre7try2 • mplayer mplayer 1.0 rc1