Security bugs are reported here via bugzilla

[Thomas Houssin <thomas.houssin AT gmail.com>]

Mplayer updated to 1.0pre7 in devel, test and stable.
Updated spell video/mplayer attached.

-- 
Thomas Houssin

Security Team Lead : Source Mage GNU/Linux http://www.sourcemage.org
Key fingerprint = 3CB8 3FC4 840D B272 E623  BCB8 54DB F4E3 4240 4C36
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x42404C36

Attachment: mplayer.tar.bz2
Description: application/bzip

--- Begin Message ---

• From: Matthias Geerdsen <vorlon AT gentoo.org>
• To: gentoo-announce AT lists.gentoo.org
• Cc: bugtraq AT securityfocus.com, full-disclosure AT lists.grok.org.uk, security-alerts AT linuxsecurity.com
• Subject: [ GLSA 200504-19 ] MPlayer: Two heap overflow vulnerabilities
• Date: Wed, 20 Apr 2005 09:28:27 +0200

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200504-19
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Severity: Normal
Title: MPlayer: Two heap overflow vulnerabilities
Date: April 20, 2005
Bugs: #89277
ID: 200504-19

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis
========

Two vulnerabilities have been found in MPlayer which could lead to the
remote execution of arbitrary code.

Background
==========

MPlayer is a media player capable of handling multiple multimedia file
formats.

Affected packages
=================

-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 media-video/mplayer < 1.0_pre6-r4 >= 1.0_pre6-r4

Description
===========

Heap overflows have been found in the code handling RealMedia RTSP and
Microsoft Media Services streams over TCP (MMST).

Impact
======

By setting up a malicious server and enticing a user to use its
streaming data, a remote attacker could possibly execute arbitrary code
on the client computer with the permissions of the user running
MPlayer.

Workaround
==========

There is no known workaround at this time.

Resolution
==========

All MPlayer users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=media-video/mplayer-1.0_pre6-r4"

References
==========

[ 1 ] MPlayer News: Real RTSP heap overflow
http://www.mplayerhq.hu/homepage/design7/news.html#vuln10
[ 2 ] MPlayer News: MMST heap overflow
http://www.mplayerhq.hu/homepage/design7/news.html#vuln11

Availability
============

This GLSA and any updates to it are available for viewing at
the Gentoo Security Website:

http://security.gentoo.org/glsa/glsa-200504-19.xml

Concerns?
=========

Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users machines is of utmost
importance to us. Any security concerns should be addressed to
security AT gentoo.org or alternatively, you may file a bug at
http://bugs.gentoo.org.

License
=======

Copyright 2005 Gentoo Foundation, Inc; referenced text
belongs to its owner(s).

The contents of this document are licensed under the
Creative Commons - Attribution / Share Alike license.

http://creativecommons.org/licenses/by-sa/2.0

Attachment: pgpYqgmAEwDjd.pgp
Description: PGP signature

--- End Message ---

Attachment: signature.asc
Description: OpenPGP digital signature