CVE-2008-0485
Fixed in a distro release EPSS 9%
Array index error in libmpdemux/demux_mov.c in MPlayer 1.0 rc2 and earlier might allow remote attackers to execute arbitrary code via a QuickTime MOV file with a crafted stsc atom tag.
Products: mplayer
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | mplayer | 1.0~rc2-8 |
| Debian 13 | mplayer | 1.0~rc2-8 |
| Debian 14 | mplayer | 1.0~rc2-8 |
| Debian 4.0 | mplayer | 1.0~rc1-12etch2 |
| Debian 5.0 | mplayer | 1.0~rc2-7+lenny1 |