MPlayer allows remote attackers to cause a denial of service (application crash) via (1) a malformed AAC file, as demonstrated by lol-vlc.aac; or (2) a malformed Ogg Media (OGM) file, as demonstrated by lol-ffplay.ogm, different vectors than CVE-2007-6718.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpegUpgrade mplayer | Jul 30, 2024 | Oct 20, 2008 |
| Ffmpeg | — | Upgrade to FFmpeg version 0.5 | Jul 20, 2026 | Oct 20, 2008 |
| Gentoo Linux | — | Upgrade media-video/mplayer. | Oct 30, 2017 | Oct 20, 2008 |
| Ubuntu | — | Upgrade libavcodec1dUpgrade libavformat52Upgrade libavformat1dUpgrade libavcodec51 | Nov 8, 2024 | Oct 20, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub