CVE-2008-4610
Fixed in a distro release EPSS 9%
MPlayer allows remote attackers to cause a denial of service (application crash) via (1) a malformed AAC file, as demonstrated by lol-vlc.aac; or (2) a malformed Ogg Media (OGM) file, as demonstrated by lol-ffplay.ogm, different vectors than CVE-2007-6718.
Products: mplayer
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | ffmpeg | 7:2.4.1-1 |
| Debian 12 | mplayer | 1.0~rc2-20 |
| Debian 13 | ffmpeg | 7:2.4.1-1 |
| Debian 13 | mplayer | 1.0~rc2-20 |
| Debian 14 | ffmpeg | 7:2.4.1-1 |
| Debian 14 | mplayer | 1.0~rc2-20 |
| Debian 5.0 | mplayer | 1.0~rc2-17+lenny2 |