5

CVE-2008-4610

MPlayer allows remote attackers to cause a denial of service (application crash) via (1) a malformed AAC file, as demonstrated by lol-vlc.aac; or (2) a malformed Ogg Media (OGM) file, as demonstrated by lol-ffplay.ogm, different vectors than CVE-2007-6718.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mplayer ≫ Mplayer Version <= 1.0_rc1
Mplayer ≫ Mplayer Version 0.90
Mplayer ≫ Mplayer Version 0.90_pre
Mplayer ≫ Mplayer Version 0.90_rc
Mplayer ≫ Mplayer Version 0.90_rc4
Mplayer ≫ Mplayer Version 0.91
Mplayer ≫ Mplayer Version 0.92
Mplayer ≫ Mplayer Version 0.92.1
Mplayer ≫ Mplayer Version 0.92_cvs
Mplayer ≫ Mplayer Version 1.0_pre1
Mplayer ≫ Mplayer Version 1.0_pre2
Mplayer ≫ Mplayer Version 1.0_pre3
Mplayer ≫ Mplayer Version 1.0_pre3try2
Mplayer ≫ Mplayer Version 1.0_pre4
Mplayer ≫ Mplayer Version 1.0_pre5
Mplayer ≫ Mplayer Version 1.0_pre5try1
Mplayer ≫ Mplayer Version 1.0_pre5try2
Mplayer ≫ Mplayer Version 1.0_pre6
Mplayer ≫ Mplayer Version 1.0_pre7
Mplayer ≫ Mplayer Version 1.0_pre7try2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 9.28% 0.947
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.openwall.com/lists/oss-security/2008/10/07/1
http://secunia.com/advisories/34296
http://www.ubuntu.com/usn/USN-734-1