CVE-2008-5616
 
Severity Score
10.0
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Stack-based buffer overflow in the demux_open_vqf function in libmpdemux/demux_vqf.c in MPlayer 1.0 rc2 before r28150 allows remote attackers to execute arbitrary code via a malformed TwinVQ file.
Desbordamiento de búfer basado en pila en la función demux_open_vqf en libmpdemux/demux_vqf.c en MPlayer v1.0 rc2 anterior a r28150 que permite a atacantes remotos ejecutar código a su elección a través de un fichero malformado TwinVQ.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2008-12-16 CVE Reserved
- 2008-12-17 CVE Published
- 2023-06-16 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (10)
URL | Tag | Source |
---|---|---|
http://secunia.com/advisories/34845 | Third Party Advisory | |
http://svn.mplayerhq.hu/mplayer/branches/1.0rc2/libmpdemux/demux_vqf.c?r1=24723&r2=28150&pathrev=28150 | X_refsource_confirm | |
http://svn.mplayerhq.hu/mplayer/branches/1.0rc2/libmpdemux/demux_vqf.c?view=log&pathrev=28150#rev28150 | X_refsource_confirm | |
http://trapkit.de/advisories/TKADV2008-014.txt | X_refsource_misc | |
http://www.securityfocus.com/archive/1/499214/100/0/threaded | Mailing List | |
http://www.securityfocus.com/bid/32822 | Vdb Entry |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
http://secunia.com/advisories/33136 | 2018-10-11 | |
http://www.debian.org/security/2009/dsa-1782 | 2018-10-11 | |
http://www.mandriva.com/security/advisories?name=MDVSA-2009:013 | 2018-10-11 | |
http://www.mandriva.com/security/advisories?name=MDVSA-2009:014 | 2018-10-11 |
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Mplayer Search vendor "Mplayer" | Mplayer Search vendor "Mplayer" for product "Mplayer" | <= 1.0_rc1 Search vendor "Mplayer" for product "Mplayer" and version " <= 1.0_rc1" | - |
Affected
| ||||||
Mplayer Search vendor "Mplayer" | Mplayer Search vendor "Mplayer" for product "Mplayer" | 0.90 Search vendor "Mplayer" for product "Mplayer" and version "0.90" | - |
Affected
| ||||||
Mplayer Search vendor "Mplayer" | Mplayer Search vendor "Mplayer" for product "Mplayer" | 0.90_pre Search vendor "Mplayer" for product "Mplayer" and version "0.90_pre" | - |
Affected
| ||||||
Mplayer Search vendor "Mplayer" | Mplayer Search vendor "Mplayer" for product "Mplayer" | 0.90_rc Search vendor "Mplayer" for product "Mplayer" and version "0.90_rc" | - |
Affected
| ||||||
Mplayer Search vendor "Mplayer" | Mplayer Search vendor "Mplayer" for product "Mplayer" | 0.90_rc4 Search vendor "Mplayer" for product "Mplayer" and version "0.90_rc4" | - |
Affected
| ||||||
Mplayer Search vendor "Mplayer" | Mplayer Search vendor "Mplayer" for product "Mplayer" | 0.91 Search vendor "Mplayer" for product "Mplayer" and version "0.91" | - |
Affected
| ||||||
Mplayer Search vendor "Mplayer" | Mplayer Search vendor "Mplayer" for product "Mplayer" | 0.92 Search vendor "Mplayer" for product "Mplayer" and version "0.92" | - |
Affected
| ||||||
Mplayer Search vendor "Mplayer" | Mplayer Search vendor "Mplayer" for product "Mplayer" | 0.92.1 Search vendor "Mplayer" for product "Mplayer" and version "0.92.1" | - |
Affected
| ||||||
Mplayer Search vendor "Mplayer" | Mplayer Search vendor "Mplayer" for product "Mplayer" | 0.92_cvs Search vendor "Mplayer" for product "Mplayer" and version "0.92_cvs" | - |
Affected
| ||||||
Mplayer Search vendor "Mplayer" | Mplayer Search vendor "Mplayer" for product "Mplayer" | 1.0_pre1 Search vendor "Mplayer" for product "Mplayer" and version "1.0_pre1" | - |
Affected
| ||||||
Mplayer Search vendor "Mplayer" | Mplayer Search vendor "Mplayer" for product "Mplayer" | 1.0_pre2 Search vendor "Mplayer" for product "Mplayer" and version "1.0_pre2" | - |
Affected
| ||||||
Mplayer Search vendor "Mplayer" | Mplayer Search vendor "Mplayer" for product "Mplayer" | 1.0_pre3 Search vendor "Mplayer" for product "Mplayer" and version "1.0_pre3" | - |
Affected
| ||||||
Mplayer Search vendor "Mplayer" | Mplayer Search vendor "Mplayer" for product "Mplayer" | 1.0_pre3try2 Search vendor "Mplayer" for product "Mplayer" and version "1.0_pre3try2" | - |
Affected
| ||||||
Mplayer Search vendor "Mplayer" | Mplayer Search vendor "Mplayer" for product "Mplayer" | 1.0_pre4 Search vendor "Mplayer" for product "Mplayer" and version "1.0_pre4" | - |
Affected
| ||||||
Mplayer Search vendor "Mplayer" | Mplayer Search vendor "Mplayer" for product "Mplayer" | 1.0_pre5 Search vendor "Mplayer" for product "Mplayer" and version "1.0_pre5" | - |
Affected
| ||||||
Mplayer Search vendor "Mplayer" | Mplayer Search vendor "Mplayer" for product "Mplayer" | 1.0_pre5try1 Search vendor "Mplayer" for product "Mplayer" and version "1.0_pre5try1" | - |
Affected
| ||||||
Mplayer Search vendor "Mplayer" | Mplayer Search vendor "Mplayer" for product "Mplayer" | 1.0_pre5try2 Search vendor "Mplayer" for product "Mplayer" and version "1.0_pre5try2" | - |
Affected
| ||||||
Mplayer Search vendor "Mplayer" | Mplayer Search vendor "Mplayer" for product "Mplayer" | 1.0_pre6 Search vendor "Mplayer" for product "Mplayer" and version "1.0_pre6" | - |
Affected
| ||||||
Mplayer Search vendor "Mplayer" | Mplayer Search vendor "Mplayer" for product "Mplayer" | 1.0_pre7 Search vendor "Mplayer" for product "Mplayer" and version "1.0_pre7" | - |
Affected
| ||||||
Mplayer Search vendor "Mplayer" | Mplayer Search vendor "Mplayer" for product "Mplayer" | 1.0_pre7try2 Search vendor "Mplayer" for product "Mplayer" and version "1.0_pre7try2" | - |
Affected
|