[31820] in bugtraq
MPlayer Security Advisory #01: Remotely exploitable buffer overflow
daemon@ATHENA.MIT.EDU (Gabucino)
Thu Sep 25 23:23:14 2003
Date: Thu, 25 Sep 2003 12:38:26 +0200
From: Gabucino <gabucino-NO-SPAM@mplayerhq.hu>
To: bugtraq@securityfocus.com
Message-ID: <20030925103825.GA19368@woodstock.localdomain>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
protocol="application/pgp-signature"; boundary="EVF5PPMfhYS0aIcm"
Content-Disposition: inline
--EVF5PPMfhYS0aIcm
Content-Type: text/plain; charset=iso-8859-2
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Severity:
HIGH (if playing ASX streaming content)
LOW (if playing only normal files)
Description:
A remotely exploitable buffer overflow vulnerability was found in MPlayer.
A malicious host can craft a harmful ASX header, and trick MPlayer into
executing arbitrary code upon parsing that header.
MPlayer versions affected:
MPlayer 0.90pre series
MPlayer 0.90rc series
MPlayer 0.90
MPlayer 0.91
MPlayer 1.0pre1
MPlayer versions unaffected:
MPlayer releases before 0.90pre1
MPlayer 0.92
MPlayer HEAD CVS
Notification status:
Developers were notified on 2003.09.24
Fix was commited into HEAD CVS at 2003.09.25 02:36:36 CEST
MPlayer 0.92 (vuln-fix-only release) was released on 2003.09.25 12:00:00 CE=
ST
Patch availability:
A patch is available for all vulnerable versions.
Suggested upgrading methods:
MPlayer 1.0pre1 users should upgrade to latest CVS
MPlayer 0.91 (and below) users should upgrade to 0.92 OR latest CVS
MPlayer 0.92 is available for download.
--=20
Gabucino
MPlayer Core Team
--EVF5PPMfhYS0aIcm
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org
iD8DBQE/csWhAq6GhkS0XDcRArg0AJ4tIpP3/vxoOg6pco7iz86padAUlQCfcmL8
uyX7tLr+6STaGbX645Lmreg=
=Kx4N
-----END PGP SIGNATURE-----
--EVF5PPMfhYS0aIcm--
