Multiple heap-based buffer overflows in the code used to handle (1) MMS over TCP (MMST) streams or (2) RealMedia RTSP streams in xine-lib before 1.0, and other products that use xine-lib such as MPlayer 1.0pre6 and earlier, allow remote malicious servers to execute arbitrary code.
CVSS Details
- CVSS 3.1 Base Score: 7.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade mplayerUpgrade mplayer-gtkUpgrade mplayer-gtk2Upgrade mplayer-gtk2-esoundUpgrade libxineUpgrade mplayer-esoundUpgrade mplayer-gtk-esound | Dec 10, 2025 | Apr 25, 2005 |
| Gentoo Linux | — | Upgrade media-video/mplayer. | Oct 30, 2017 | May 2, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub