CVE-2008-4610

MPlayer - '.AAC' File Handling Denial of Service

Severity Score

5.0

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

MPlayer allows remote attackers to cause a denial of service (application crash) via (1) a malformed AAC file, as demonstrated by lol-vlc.aac; or (2) a malformed Ogg Media (OGM) file, as demonstrated by lol-ffplay.ogm, different vectors than CVE-2007-6718.

MPlayer permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) mediante (1) un archivo mal formado, como lo demuestra lol-vlc.aac; o (2) un archivo malformado Ogg Media (OGM), como lo demuestra lol-ffplay.ogm, vectores distintos que CVE-2007-6718.

*Credits: N/A

CVSS Scores

NISTv2 5.0

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2008-10-07 First Exploit
2008-10-20 CVE Reserved
2008-10-20 CVE Published
2024-08-07 CVE Updated
2024-10-26 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-399: Resource Management Errors

CAPEC

References (5)

URL	Tag	Source
http://secunia.com/advisories/34296	Third Party Advisory
http://www.openwall.com/lists/oss-security/2008/10/07/1	Mailing List

URL	Date	SRC
https://www.exploit-db.com/exploits/32856	2008-10-07
https://www.exploit-db.com/exploits/32857	2008-10-07

URL	Date	SRC

URL	Date	SRC
http://www.ubuntu.com/usn/USN-734-1	2009-03-20

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Mplayer Search vendor "Mplayer"		Mplayer Search vendor "Mplayer" for product "Mplayer"				<= 1.0_rc1 Search vendor "Mplayer" for product "Mplayer" and version " <= 1.0_rc1"		-		Affected
Mplayer Search vendor "Mplayer"		Mplayer Search vendor "Mplayer" for product "Mplayer"				0.90 Search vendor "Mplayer" for product "Mplayer" and version "0.90"		-		Affected
Mplayer Search vendor "Mplayer"		Mplayer Search vendor "Mplayer" for product "Mplayer"				0.90_pre Search vendor "Mplayer" for product "Mplayer" and version "0.90_pre"		-		Affected
Mplayer Search vendor "Mplayer"		Mplayer Search vendor "Mplayer" for product "Mplayer"				0.90_rc Search vendor "Mplayer" for product "Mplayer" and version "0.90_rc"		-		Affected
Mplayer Search vendor "Mplayer"		Mplayer Search vendor "Mplayer" for product "Mplayer"				0.90_rc4 Search vendor "Mplayer" for product "Mplayer" and version "0.90_rc4"		-		Affected
Mplayer Search vendor "Mplayer"		Mplayer Search vendor "Mplayer" for product "Mplayer"				0.91 Search vendor "Mplayer" for product "Mplayer" and version "0.91"		-		Affected
Mplayer Search vendor "Mplayer"		Mplayer Search vendor "Mplayer" for product "Mplayer"				0.92 Search vendor "Mplayer" for product "Mplayer" and version "0.92"		-		Affected
Mplayer Search vendor "Mplayer"		Mplayer Search vendor "Mplayer" for product "Mplayer"				0.92.1 Search vendor "Mplayer" for product "Mplayer" and version "0.92.1"		-		Affected
Mplayer Search vendor "Mplayer"		Mplayer Search vendor "Mplayer" for product "Mplayer"				0.92_cvs Search vendor "Mplayer" for product "Mplayer" and version "0.92_cvs"		-		Affected
Mplayer Search vendor "Mplayer"		Mplayer Search vendor "Mplayer" for product "Mplayer"				1.0_pre1 Search vendor "Mplayer" for product "Mplayer" and version "1.0_pre1"		-		Affected
Mplayer Search vendor "Mplayer"		Mplayer Search vendor "Mplayer" for product "Mplayer"				1.0_pre2 Search vendor "Mplayer" for product "Mplayer" and version "1.0_pre2"		-		Affected
Mplayer Search vendor "Mplayer"		Mplayer Search vendor "Mplayer" for product "Mplayer"				1.0_pre3 Search vendor "Mplayer" for product "Mplayer" and version "1.0_pre3"		-		Affected
Mplayer Search vendor "Mplayer"		Mplayer Search vendor "Mplayer" for product "Mplayer"				1.0_pre3try2 Search vendor "Mplayer" for product "Mplayer" and version "1.0_pre3try2"		-		Affected
Mplayer Search vendor "Mplayer"		Mplayer Search vendor "Mplayer" for product "Mplayer"				1.0_pre4 Search vendor "Mplayer" for product "Mplayer" and version "1.0_pre4"		-		Affected
Mplayer Search vendor "Mplayer"		Mplayer Search vendor "Mplayer" for product "Mplayer"				1.0_pre5 Search vendor "Mplayer" for product "Mplayer" and version "1.0_pre5"		-		Affected
Mplayer Search vendor "Mplayer"		Mplayer Search vendor "Mplayer" for product "Mplayer"				1.0_pre5try1 Search vendor "Mplayer" for product "Mplayer" and version "1.0_pre5try1"		-		Affected
Mplayer Search vendor "Mplayer"		Mplayer Search vendor "Mplayer" for product "Mplayer"				1.0_pre5try2 Search vendor "Mplayer" for product "Mplayer" and version "1.0_pre5try2"		-		Affected
Mplayer Search vendor "Mplayer"		Mplayer Search vendor "Mplayer" for product "Mplayer"				1.0_pre6 Search vendor "Mplayer" for product "Mplayer" and version "1.0_pre6"		-		Affected
Mplayer Search vendor "Mplayer"		Mplayer Search vendor "Mplayer" for product "Mplayer"				1.0_pre7 Search vendor "Mplayer" for product "Mplayer" and version "1.0_pre7"		-		Affected
Mplayer Search vendor "Mplayer"		Mplayer Search vendor "Mplayer" for product "Mplayer"				1.0_pre7try2 Search vendor "Mplayer" for product "Mplayer" and version "1.0_pre7try2"		-		Affected