Patchwire CVEs, their patch status, and feeds to follow them

CVE-2008-0485

Fixed in a distro release EPSS 9%

Array index error in libmpdemux/demux_mov.c in MPlayer 1.0 rc2 and earlier might allow remote attackers to execute arbitrary code via a QuickTime MOV file with a crafted stsc atom tag.

Published 2008-02-05 · CVE record · OSV

Products: mplayer

Distro releases

ReleasePackageFixed in
Debian 12mplayer1.0~rc2-8
Debian 13mplayer1.0~rc2-8
Debian 14mplayer1.0~rc2-8
Debian 4.0mplayer1.0~rc1-12etch2
Debian 5.0mplayer1.0~rc2-7+lenny1