CVE-2008-0486
Fixed in a distro release EPSS 5%
Array index vulnerability in libmpdemux/demux_audio.c in MPlayer 1.0rc2 and SVN before r25917, and possibly earlier versions, as used in Xine-lib 1.1.10, might allow remote attackers to execute arbitrary code via a crafted FLAC tag, which triggers a buffer overflow.
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | mplayer | 1.0~rc2-8 |
| Debian 13 | mplayer | 1.0~rc2-8 |
| Debian 14 | mplayer | 1.0~rc2-8 |
| Debian 3.1 | xine-lib | 1.0.1-1sarge7 |
| Debian 4.0 | mplayer | 1.0~rc1-12etch2 |
| Debian 4.0 | xine-lib | 1.1.2+dfsg-6 |
| Debian 5.0 | mplayer | 1.0~rc2-7+lenny1 |