CVEvulnerability

CVE-2008-4610

5.0 MEDIUM Published 2008-10-20 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-10-20
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-399

Description

MPlayer allows remote attackers to cause a denial of service (application crash) via (1) a malformed AAC file, as demonstrated by lol-vlc.aac; or (2) a malformed Ogg Media (OGM) file, as demonstrated by lol-ffplay.ogm, different vectors than CVE-2007-6718.

Affected configurations

• mplayer mplayer (<= 1.0 rc1) • mplayer mplayer 0.90 • mplayer mplayer 0.90 pre • mplayer mplayer 0.90 rc • mplayer mplayer 0.90 rc4 • mplayer mplayer 0.91 • mplayer mplayer 0.92 • mplayer mplayer 0.92.1 • mplayer mplayer 0.92 cvs • mplayer mplayer 1.0 pre1 • mplayer mplayer 1.0 pre2 • mplayer mplayer 1.0 pre3 • mplayer mplayer 1.0 pre3try2 • mplayer mplayer 1.0 pre4 • mplayer mplayer 1.0 pre5 • mplayer mplayer 1.0 pre5try1 • mplayer mplayer 1.0 pre5try2 • mplayer mplayer 1.0 pre6 • mplayer mplayer 1.0 pre7 • mplayer mplayer 1.0 pre7try2

Related

Weakness · not in database (1)

References