CVE-2007-2948
Fixed in a distro release EPSS 6%
Multiple stack-based buffer overflows in stream/stream_cddb.c in MPlayer before 1.0rc1try3 allow remote attackers to execute arbitrary code via a CDDB entry with a long (1) album title or (2) category.
Products: mplayer
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | mplayer | 1.0~rc1-14 |
| Debian 13 | mplayer | 1.0~rc1-14 |
| Debian 14 | mplayer | 1.0~rc1-14 |
| Debian 4.0 | mplayer | 1.0~rc1-12etch1 |