CVE-2008-4610
MPlayer - '.AAC' File Handling Denial of Service
Severity Score
6.5
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
2
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
MPlayer allows remote attackers to cause a denial of service (application crash) via (1) a malformed AAC file, as demonstrated by lol-vlc.aac; or (2) a malformed Ogg Media (OGM) file, as demonstrated by lol-ffplay.ogm, different vectors than CVE-2007-6718.
MPlayer permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) mediante (1) un archivo mal formado, como lo demuestra lol-vlc.aac; o (2) un archivo malformado Ogg Media (OGM), como lo demuestra lol-ffplay.ogm, vectores distintos que CVE-2007-6718.
Multiple vulnerabilities have been found in MPlayer and the bundled FFmpeg, the worst of which may lead to the execution of arbitrary code. Versions less than 1.1-r1 are affected.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2008-10-07 First Exploit
- 2008-10-20 CVE Reserved
- 2008-10-20 CVE Published
- 2024-08-07 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-399: Resource Management Errors
CAPEC
References (5)
| URL | Tag | Source |
|---|---|---|
| http://secunia.com/advisories/34296 | Third Party Advisory | |
| http://www.openwall.com/lists/oss-security/2008/10/07/1 | Mailing List |
|
| URL | Date | SRC |
|---|---|---|
| https://www.exploit-db.com/exploits/32856 | 2008-10-07 | |
| https://www.exploit-db.com/exploits/32857 | 2008-10-07 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.ubuntu.com/usn/USN-734-1 | 2009-03-20 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Mplayer Search vendor "Mplayer" | Mplayer Search vendor "Mplayer" for product "Mplayer" | <= 1.0_rc1 Search vendor "Mplayer" for product "Mplayer" and version " <= 1.0_rc1" | - |
Affected
| ||||||
| Mplayer Search vendor "Mplayer" | Mplayer Search vendor "Mplayer" for product "Mplayer" | 0.90 Search vendor "Mplayer" for product "Mplayer" and version "0.90" | - |
Affected
| ||||||
| Mplayer Search vendor "Mplayer" | Mplayer Search vendor "Mplayer" for product "Mplayer" | 0.90_pre Search vendor "Mplayer" for product "Mplayer" and version "0.90_pre" | - |
Affected
| ||||||
| Mplayer Search vendor "Mplayer" | Mplayer Search vendor "Mplayer" for product "Mplayer" | 0.90_rc Search vendor "Mplayer" for product "Mplayer" and version "0.90_rc" | - |
Affected
| ||||||
| Mplayer Search vendor "Mplayer" | Mplayer Search vendor "Mplayer" for product "Mplayer" | 0.90_rc4 Search vendor "Mplayer" for product "Mplayer" and version "0.90_rc4" | - |
Affected
| ||||||
| Mplayer Search vendor "Mplayer" | Mplayer Search vendor "Mplayer" for product "Mplayer" | 0.91 Search vendor "Mplayer" for product "Mplayer" and version "0.91" | - |
Affected
| ||||||
| Mplayer Search vendor "Mplayer" | Mplayer Search vendor "Mplayer" for product "Mplayer" | 0.92 Search vendor "Mplayer" for product "Mplayer" and version "0.92" | - |
Affected
| ||||||
| Mplayer Search vendor "Mplayer" | Mplayer Search vendor "Mplayer" for product "Mplayer" | 0.92.1 Search vendor "Mplayer" for product "Mplayer" and version "0.92.1" | - |
Affected
| ||||||
| Mplayer Search vendor "Mplayer" | Mplayer Search vendor "Mplayer" for product "Mplayer" | 0.92_cvs Search vendor "Mplayer" for product "Mplayer" and version "0.92_cvs" | - |
Affected
| ||||||
| Mplayer Search vendor "Mplayer" | Mplayer Search vendor "Mplayer" for product "Mplayer" | 1.0_pre1 Search vendor "Mplayer" for product "Mplayer" and version "1.0_pre1" | - |
Affected
| ||||||
| Mplayer Search vendor "Mplayer" | Mplayer Search vendor "Mplayer" for product "Mplayer" | 1.0_pre2 Search vendor "Mplayer" for product "Mplayer" and version "1.0_pre2" | - |
Affected
| ||||||
| Mplayer Search vendor "Mplayer" | Mplayer Search vendor "Mplayer" for product "Mplayer" | 1.0_pre3 Search vendor "Mplayer" for product "Mplayer" and version "1.0_pre3" | - |
Affected
| ||||||
| Mplayer Search vendor "Mplayer" | Mplayer Search vendor "Mplayer" for product "Mplayer" | 1.0_pre3try2 Search vendor "Mplayer" for product "Mplayer" and version "1.0_pre3try2" | - |
Affected
| ||||||
| Mplayer Search vendor "Mplayer" | Mplayer Search vendor "Mplayer" for product "Mplayer" | 1.0_pre4 Search vendor "Mplayer" for product "Mplayer" and version "1.0_pre4" | - |
Affected
| ||||||
| Mplayer Search vendor "Mplayer" | Mplayer Search vendor "Mplayer" for product "Mplayer" | 1.0_pre5 Search vendor "Mplayer" for product "Mplayer" and version "1.0_pre5" | - |
Affected
| ||||||
| Mplayer Search vendor "Mplayer" | Mplayer Search vendor "Mplayer" for product "Mplayer" | 1.0_pre5try1 Search vendor "Mplayer" for product "Mplayer" and version "1.0_pre5try1" | - |
Affected
| ||||||
| Mplayer Search vendor "Mplayer" | Mplayer Search vendor "Mplayer" for product "Mplayer" | 1.0_pre5try2 Search vendor "Mplayer" for product "Mplayer" and version "1.0_pre5try2" | - |
Affected
| ||||||
| Mplayer Search vendor "Mplayer" | Mplayer Search vendor "Mplayer" for product "Mplayer" | 1.0_pre6 Search vendor "Mplayer" for product "Mplayer" and version "1.0_pre6" | - |
Affected
| ||||||
| Mplayer Search vendor "Mplayer" | Mplayer Search vendor "Mplayer" for product "Mplayer" | 1.0_pre7 Search vendor "Mplayer" for product "Mplayer" and version "1.0_pre7" | - |
Affected
| ||||||
| Mplayer Search vendor "Mplayer" | Mplayer Search vendor "Mplayer" for product "Mplayer" | 1.0_pre7try2 Search vendor "Mplayer" for product "Mplayer" and version "1.0_pre7try2" | - |
Affected
| ||||||