Skip to Content.
Sympa Menu

sm-security - [SM-Security] mplayer: heap overflow in ad_pcm.c

sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

Chronological Thread  
  • From: Thomas Houssin <thomas.houssin AT gmail.com>
  • To: sm-security AT lists.ibiblio.org
  • Subject: [SM-Security] mplayer: heap overflow in ad_pcm.c
  • Date: Fri, 02 Sep 2005 19:51:22 +0200

Synopsis
========
A heap overflow in MPlayer might lead to the execution of arbitrary code.

Background
==========
MPlayer is a movie player for LINUX (runs on many other Unices, and
non-x86 CPUs, see the documentation).

Description
===========
CAN-2005-2718:
Buffer overflow in ad_pcm.c in MPlayer 1.0pre7 and earlier allows remote
attackers to execute arbitrary code via a video file with an audio
header containing a large value in a strf parameter.

Affected packages
=================
mplayer in stable-rc 0.2 and stable 0.1 grimoires is affected (test
grimoire users, please check you are running 1.0pre7try2 version).
This is now fixed in all grimoires.

Resolution
==========
All mplayer users should upgrade to the latest available version:
# scribe update
# cast -c mplayer

References
==========
[ 1 ] 2005.08.26, Friday :: heap overflow in ad_pcm.c
http://www.mplayerhq.hu/homepage/design7/news.html

--
Thomas Houssin

Security Team Leader Source Mage GNU/Linux (http://www.sourcemage.org)
Key fingerprint = 3CB8 3FC4 840D B272 E623 BCB8 54DB F4E3 4240 4C36
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x42404C36

Attachment: signature.asc
Description: OpenPGP digital signature



  • [SM-Security] mplayer: heap overflow in ad_pcm.c, Thomas Houssin, 09/02/2005

Archive powered by MHonArc 2.6.24.

Top of Page