Multiple vulnerabilities have been discovered in MPlayer, the worst of which can lead to arbitrary code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-video/mplayer | * | < 1.5 | >= 1.5 |
MPlayer is a media player capable of handling multiple multimedia file formats.
Multiple vulnerabilities have been discovered in MPlayer. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All MPlayer users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-video/mplayer-1.5"
Multiple vulnerabilities have been found in MPlayer and the bundled FFmpeg, the worst of which may lead to the execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-video/mplayer | * | < 1.1-r1 | >= 1.1-r1 |
MPlayer is a media player including support for a wide range of audio and video formats.
Multiple vulnerabilities have been discovered in MPlayer and the bundled FFmpeg. Please review the CVE identifiers and FFmpeg GLSA referenced below for details.
A remote attacker could entice a user to open a crafted media file to execute arbitrary code or cause a Denial of Service.
There is no known workaround at this time.
All MPlayer users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-video/mplayer-1.1-r1"
Multiple vulnerabilities in FFmpeg may lead to the remote execution of arbitrary code or a Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-plugins/gst-plugins-ffmpeg | * | < 0.10.5 | >= 0.10.5 |
| media-video/ffmpeg | * | < 0.4.9_p20090201 | >= 0.4.9_p20090201 |
| media-video/mplayer | * | < 1.0_rc2_p28450 | >= 1.0_rc2_p28450 |
FFmpeg is a complete solution to record, convert and stream audio and video. gst-plugins-ffmpeg is a FFmpeg based gstreamer plugin which includes a vulnerable copy of FFmpeg code. Mplayer is a multimedia player which also includes a vulnerable copy of the code.
Multiple vulnerabilities were found in FFmpeg:
A remote attacker could entice a user to open a specially crafted media file, possibly leading to the execution of arbitrary code with the privileges of the user running the application, or a Denial of Service.
There is no known workaround at this time.
All FFmpeg users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-video/ffmpeg-0.4.9_p20090201"
All gst-plugins-ffmpeg users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-plugins/gst-plugins-ffmpeg-0.10.5"
All Mplayer users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-video/mplayer-1.0_rc2_p28450"
Multiple vulnerabilities in MPlayer may lead to the execution of arbitrary code or a Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-video/mplayer | * | < 1.0_rc2_p28058-r1 | >= 1.0_rc2_p28058-r1 |
MPlayer is a media player including support for a wide range of audio and video formats.
Multiple vulnerabilities have been reported in MPlayer:
A remote attacker could entice a user to open a specially crafted STR, Real Media, or TwinVQ file to execute arbitrary code or cause a Denial of Service.
There is no known workaround at this time.
All MPlayer users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-video/mplayer-1.0_rc2_p28058-r1 "
An integer overflow vulnerability in MPlayer may allow for the execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-video/mplayer | * | < 1.0_rc2_p26753 | >= 1.0_rc2_p26753 |
MPlayer is a media player including support for a wide range of audio and video formats.
k`sOSe reported an integer overflow vulnerability in the sdpplin_parse() function in the file stream/realrtsp/sdpplin.c, which can be exploited to overwrite arbitrary memory regions via an overly large "StreamCount" SDP parameter.
A remote attacker could entice a user to open a specially crafted media file, possibly resulting in the execution of arbitrary code with the privileges of the user running MPlayer.
There is no known workaround at this time.
All MPlayer users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-video/mplayer-1.0_rc2_p26753"
Multiple vulnerabilities have been discovered in MPlayer, possibly allowing for the remote execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-video/mplayer | * | < 1.0_rc2_p25993 | >= 1.0_rc2_p25993 |
MPlayer is a media player incuding support for a wide range of audio and video formats.
The following errors have been discovered in MPlayer:
A remote attacker could entice a user to open a specially crafted file, possibly resulting in the execution of arbitrary code with the privileges of the user running MPlayer.
There is no known workaround at this time.
All MPlayer users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-video/mplayer-1.0_rc2_p25993"
Multiple vulnerabilities have been discovered in MPlayer, possibly allowing for the remote execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-video/mplayer | * | < 1.0.20070622 | >= 1.0.20070622, < 1.0 |
MPlayer is a media player incuding support for a wide range of audio and video formats.
Stefan Cornelius and Reimar Doffinger of Secunia Research discovered several boundary errors in the functions cddb_query_parse(), cddb_parse_matches_list() and cddb_read_parse(), each allowing for a stack-based buffer overflow.
A remote attacker could entice a user to open a specially crafted file with malicious CDDB entries, possibly resulting in the execution of arbitrary code with the privileges of the user running MPlayer.
There is no known workaround at this time.
All MPlayer users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-video/mplayer-1.0.20070622"
Two vulnerabilities have been discovered in MPlayer, each one could lead to the execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-video/mplayer | * | < 1.0.20070321 | >= 1.0.20070321, < 1.0 |
MPlayer is a media player incuding support for a wide range of audio and video formats.
A buffer overflow has been reported in the DMO_VideoDecoder_Open() function in file loader/dmo/DMO_VideoDecoder.c. Another buffer overflow has been reported in the DS_VideoDecoder_Open() function in file loader/dshow/DS_VideoDecoder.c.
A remote attacker could entice a user to open a specially crafted video file, potentially resulting in the execution of arbitrary code with the privileges of the user running MPlayer.
There is no known workaround at this time.
All MPlayer users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-video/mplayer-1.0.20070321"
A buffer overflow was found in MPlayer's RTSP plugin that could lead to a Denial of Service or arbitrary code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-video/mplayer | * | < 1.0_rc1-r2 | >= 1.0_rc1-r2 |
MPlayer is a media player capable of playing multiple media formats.
When checking for matching asm rules in the asmrp.c code, the results are stored in a fixed-size array without boundary checks which may allow a buffer overflow.
An attacker can entice a user to connect to a manipulated RTSP server resulting in a Denial of Service and possibly execution of arbitrary code.
There is no known workaround at this time.
All MPlayer users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-video/mplayer-1.0_rc1-r2"
MPlayer contains multiple integer overflows that may lead to a heap-based buffer overflow.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-video/mplayer | * | < 1.0.20060415 | >= 1.0.20060415, >= 1.0_pre8 |
| media-video/mplayer-bin | * | < 1.0.20060415 | >= 1.0.20060415, >= 1.0_pre8 |
MPlayer is a media player that supports many multimedia file types.
Xfocus Team discovered multiple integer overflows that may lead to a heap-based buffer overflow.
An attacker could entice a user to play a specially crafted multimedia file, potentially resulting in the execution of arbitrary code with the privileges of the user running the application.
There is no known workaround at this time.
All MPlayer users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-video/mplayer-1.0.20060415"
All MPlayer binary users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-video/mplayer-bin-1.0.20060415"
MPlayer is vulnerable to integer overflows in FFmpeg and ASF decoding that could potentially result in the execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-video/mplayer | * | < 1.0.20060217 | >= 1.0.20060217, >= 1.0_pre8 |
MPlayer is a media player capable of handling multiple multimedia file formats.
MPlayer makes use of the FFmpeg library, which is vulnerable to a heap overflow in the avcodec_default_get_buffer() function discovered by Simon Kilvington (see GLSA 200601-06). Furthermore, AFI Security Research discovered two integer overflows in ASF file format decoding, in the new_demux_packet() function from libmpdemux/demuxer.h and the demux_asf_read_packet() function from libmpdemux/demux_asf.c.
An attacker could craft a malicious media file which, when opened using MPlayer, would lead to a heap-based buffer overflow. This could result in the execution of arbitrary code with the permissions of the user running MPlayer.
There is no known workaround at this time.
All MPlayer users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-video/mplayer-1.0.20060217"
A heap overflow in MPlayer might lead to the execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-video/mplayer | * | < 1.0_pre7-r1 | >= 1.0_pre7-r1 |
MPlayer is a media player capable of handling multiple multimedia file formats.
Sven Tantau discovered a heap overflow in the code handling the strf chunk of PCM audio streams.
An attacker could craft a malicious video or audio file which, when opened using MPlayer, would end up executing arbitrary code on the victim's computer with the permissions of the user running MPlayer.
You can mitigate the issue by adding "ac=-pcm," to your MPlayer configuration file (note that this will prevent you from playing uncompressed audio).
All MPlayer users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-video/mplayer-1.0_pre7-r1"
Two vulnerabilities have been found in MPlayer which could lead to the remote execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-video/mplayer | * | < 1.0_pre6-r4 | >= 1.0_pre6-r4 |
MPlayer is a media player capable of handling multiple multimedia file formats.
Heap overflows have been found in the code handling RealMedia RTSP and Microsoft Media Services streams over TCP (MMST).
By setting up a malicious server and enticing a user to use its streaming data, a remote attacker could possibly execute arbitrary code on the client computer with the permissions of the user running MPlayer.
There is no known workaround at this time.
All MPlayer users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-video/mplayer-1.0_pre6-r4"
Multiple overflow vulnerabilities have been found in MPlayer, potentially resulting in remote executing of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-video/mplayer | * | <= 1.0_pre5-r4 | >= 1.0_pre5-r5 |
MPlayer is a media player capable of handling multiple multimedia file formats.
iDEFENSE, Ariel Berkman and the MPlayer development team found multiple vulnerabilities in MPlayer. These include potential heap overflows in Real RTSP and pnm streaming code, stack overflows in MMST streaming code and multiple buffer overflows in BMP demuxer and mp3lib code.
A remote attacker could craft a malicious file or design a malicious streaming server. Using MPlayer to view this file or connect to this server could trigger an overflow and execute attacker-controlled code.
There is no known workaround at this time.
All MPlayer users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-video/mplayer-1.0_pre5-r5"
When compiled with GUI support MPlayer is vulnerable to a remotely exploitable buffer overflow attack.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-video/mplayer | * | < 1.0_pre4-r7 | >= 1.0_pre4-r7 |
MPlayer is a media player capable of handling multiple multimedia file formats.
The MPlayer GUI code contains several buffer overflow vulnerabilities, and at least one in the TranslateFilename() function is exploitable.
By enticing a user to play a file with a carefully crafted filename an attacker could execute arbitrary code with the permissions of the user running MPlayer.
To work around this issue, users can compile MPlayer without GUI support by disabling the gtk USE flag. All users are encouraged to upgrade to the latest available version of MPlayer.
All MPlayer users should upgrade to the latest version:
# emerge sync # emerge -pv ">=media-video/mplayer-1.0_pre4-r7" # emerge ">=media-video/mplayer-1.0_pre4-r7"
Multiple vulnerabilities, including remotely exploitable buffer overflows, have been found in code common to MPlayer and the xine library.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-libs/xine-lib | * | < 1_rc4 | >= 1_rc4, <= 0.9.13-r3 |
| media-video/mplayer | * | < 1.0_pre4 | >= 1.0_pre4, <= 0.92-r1 |
MPlayer is a movie player capable of handling multiple multimedia file formats. xine-lib is a multimedia player library used by several graphical user interfaces, including xine-ui. They both use the same code to handle Real-Time Streaming Protocol (RTSP) streams from RealNetworks servers.
Multiple vulnerabilities have been found and fixed in the RTSP handling code common to recent versions of these two packages. These vulnerabilities include several remotely exploitable buffer overflows.
A remote attacker, posing as a RTSP stream server, can execute arbitrary code with the rights of the user of the software playing the stream (MPlayer or any player using xine-lib). Another attacker may entice a user to use a maliciously crafted URL or playlist to achieve the same results.
For MPlayer, there is no known workaround at this time. For xine-lib, you can delete the xineplug_inp_rtsp.so file.
All users should upgrade to non-vulnerable versions of MPlayer and xine-lib:
# emerge sync # emerge -pv ">=media-video/mplayer-1.0_pre4" # emerge ">=media-video/mplayer-1.0_pre4" # emerge -pv ">=media-libs/xine-lib-1_rc4" # emerge ">=media-libs/xine-lib-1_rc4"
MPlayer contains a remotely exploitable buffer overflow in the HTTP parser that may allow attackers to run arbitrary code on a user's computer.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-video/mplayer | amd64 | <= 0.92, <= 1.0_pre2, <= 1.0_pre3 | >= 0.92-r1, >= 1.0_pre2-r1, >= 1.0_pre3-r3 |
| media-video/mplayer | ppc | <= 0.92, <= 1.0_pre2, <= 1.0_pre3 | >= 0.92-r1, >= 1.0_pre2-r1, >= 1.0_pre3-r3 |
| media-video/mplayer | x86 sparc | <= 0.92, <= 1.0_pre2, <= 1.0_pre3 | >= 0.92-r1, >= 1.0_pre2-r1, >= 1.0_pre3-r3 |
Quote from http://mplayerhq.hu
"MPlayer is a movie player for LINUX (runs on many other Unices, and non-x86 CPUs, see the documentation). It plays most MPEG, VOB, AVI, OGG/OGM, VIVO, ASF/WMA/WMV, QT/MOV/MP4, FLI, RM, NuppelVideo, YUV4MPEG, FILM, RoQ, PVA files, supported by many native, XAnim, and Win32 DLL codecs. You can watch VideoCD, SVCD, DVD, 3ivx, DivX 3/4/5 and even WMV movies, too."
A vulnerability exists in the MPlayer HTTP parser which may allow an attacker to craft a special HTTP header ("Location:") which will trick MPlayer into executing arbitrary code on the user's computer.
An attacker without privileges may exploit this vulnerability remotely, allowing arbitrary code to be executed in order to gain unauthorized access.
A workaround is not currently known for this issue. All users are advised to upgrade to the latest version of the affected package.
MPlayer may be upgraded as follows:
x86 and SPARC users should:
# emerge sync # emerge -pv ">=media-video/mplayer-0.92-r1" # emerge ">=media-video/mplayer-0.92-r1"
AMD64 users should:
# emerge sync # emerge -pv ">=media-video/mplayer-1.0_pre2-r1" # emerge ">=media-video/mplayer-1.0_pre2-r1"
PPC users should:
# emerge sync # emerge -pv ">=media-video/mplayer-1.0_pre3-r2" # emerge ">=media-video/mplayer-1.0_pre3-r2"