CVE-2008-5616
Fixed in a distro release EPSS 8%
Stack-based buffer overflow in the demux_open_vqf function in libmpdemux/demux_vqf.c in MPlayer 1.0 rc2 before r28150 allows remote attackers to execute arbitrary code via a malformed TwinVQ file.
Products: mplayer
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | mplayer | 1.0~rc2-19 |
| Debian 13 | mplayer | 1.0~rc2-19 |
| Debian 14 | mplayer | 1.0~rc2-19 |
| Debian 4.0 | mplayer | 1.0~rc1-12etch7 |
| Debian 5.0 | mplayer | 1.0~rc2-17+lenny2 |