MPlayer WAV File Remote Null Pointer Dereference Vulnerability
BID:38837
Info
MPlayer WAV File Remote Null Pointer Dereference Vulnerability
| Bugtraq ID: | 38837 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 18 2010 12:00AM |
| Updated: | Mar 18 2010 12:00AM |
| Credit: | Pietro Oliva |
| Vulnerable: |
MPlayer MPlayer 1.0.20060329 MPlayer MPlayer 1.0 pre6-r4 MPlayer MPlayer 1.0 pre6-3.3.5-20050130 MPlayer MPlayer 1.0 pre6 MPlayer MPlayer 1.0 pre5try2 MPlayer MPlayer 1.0 pre5try1 MPlayer MPlayer 1.0 pre5 MPlayer MPlayer 1.0 pre4 MPlayer MPlayer 1.0 pre3try2 MPlayer MPlayer 1.0 pre3 MPlayer MPlayer 1.0 pre2 MPlayer MPlayer 1.0 pre1 MPlayer MPlayer 1.0rc2-4.2.1 MPlayer MPlayer 1.0rc2 MPlayer MPlayer 1.0pre7try2 MPlayer MPlayer 1.0 RC3 MPlayer MPlayer 1.0 -rc1 |
| Not Vulnerable: | |
Discussion
MPlayer WAV File Remote Null Pointer Dereference Vulnerability
MPlayer is prone to a remote NULL-pointer dereference vulnerability because the application fails to perform adequate boundary checks on user-supplied input.
Attackers may exploit this issue to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.
MPlayer 1.0rc3 is vulnerable; other versions may also be affected.
MPlayer is prone to a remote NULL-pointer dereference vulnerability because the application fails to perform adequate boundary checks on user-supplied input.
Attackers may exploit this issue to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.
MPlayer 1.0rc3 is vulnerable; other versions may also be affected.
Exploit / POC
MPlayer WAV File Remote Null Pointer Dereference Vulnerability
The following proof of concept is available:
The following proof of concept is available:
References
MPlayer WAV File Remote Null Pointer Dereference Vulnerability
References:
References:
- MPlayer Homepage (MPlayer)