MPlayer SAMI Subtitle File Buffer Overflow Vulnerability
BID:49149
Info
MPlayer SAMI Subtitle File Buffer Overflow Vulnerability
| Bugtraq ID: | 49149 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 15 2011 12:00AM |
| Updated: | May 30 2012 09:50AM |
| Credit: | Jacques Louw, MWR InfoSecurity |
| Vulnerable: |
MPlayer MPlayer 1.0.20060329 MPlayer MPlayer 1.0 pre6-r4 MPlayer MPlayer 1.0 pre6-3.3.5-20050130 MPlayer MPlayer 1.0 pre6 MPlayer MPlayer 1.0 pre5try2 MPlayer MPlayer 1.0 pre5try1 MPlayer MPlayer 1.0 pre5 MPlayer MPlayer 1.0 pre4 MPlayer MPlayer 1.0 pre3try2 MPlayer MPlayer 1.0 pre3 MPlayer MPlayer 1.0 pre2 MPlayer MPlayer 1.0 pre1 MPlayer MPlayer 0.92.1 MPlayer MPlayer 0.92 MPlayer MPlayer 0.91 MPlayer MPlayer 0.90 rc series MPlayer MPlayer 0.90 pre series MPlayer MPlayer 0.90 MPlayer MPlayer 0.9 0rc4 MPlayer MPlayer 1.0rc2-4.2.1 MPlayer MPlayer 1.0rc2 MPlayer MPlayer 1.0pre7try2 MPlayer MPlayer 1.0_rc4 MPlayer MPlayer 1.0 RC3 MPlayer MPlayer 1.0 -rc1 MPlayer MPlayer 1.0 MPlayer MPlayer 0_92 CVS MPlayer MPlayer 0 |
| Not Vulnerable: |
MPlayer MPlayer 33471 |
Discussion
MPlayer SAMI Subtitle File Buffer Overflow Vulnerability
MPlayer is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.
Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.
Versions prior to MPlayer 33471 are vulnerable.
MPlayer is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.
Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.
Versions prior to MPlayer 33471 are vulnerable.
Exploit / POC
MPlayer SAMI Subtitle File Buffer Overflow Vulnerability
The following exploit is available:
The following exploit is available:
Solution / Fix
MPlayer SAMI Subtitle File Buffer Overflow Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
MPlayer SAMI Subtitle File Buffer Overflow Vulnerability
References:
References:
- MPlayer Release Notes (MPlayer)
- Vendor Homepage (MPlayer WW Project)