Buffer overflow in url.c in MPlayer 1.0rc2 and SVN before r25823 allows remote attackers to execute arbitrary code via a crafted URL that prevents the IPv6 parsing code from setting a pointer to NULL, which causes the buffer to be reused by the unescape code.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade mplayer | Jul 30, 2024 | Feb 6, 2008 |
| Freebsd | — | Upgrade mplayer-esoundUpgrade mplayer-gtk2-esoundUpgrade mplayer-gtkUpgrade mplayerUpgrade mplayer-gtk-esoundUpgrade mplayer-gtk2 | Dec 10, 2025 | Mar 6, 2008 |
| Gentoo Linux | — | Upgrade media-video/mplayer. | Oct 30, 2017 | Feb 6, 2008 |
| Ubuntu | — | Upgrade mplayer | Nov 19, 2024 | Feb 6, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub