CVE-2007-2948
- State
- Published
- Severity
- Not scored
- Published
- Jun 7, 2007
- Updated
- Aug 7, 2024
- Reserved
- May 31, 2007
Description
Multiple stack-based buffer overflows in stream/stream_cddb.c in MPlayer before 1.0rc1try3 allow remote attackers to execute arbitrary code via a CDDB entry with a long (1) album title or (2) category.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- mplayer-cddb-bo(34749)vdb-entry
- 26083third-party-advisory
- MDKSA-2007:143vendor-advisory
- http://www.mplayerhq.hu/design7/news.html
- 24302third-party-advisory
- GLSA-200707-07vendor-advisory
- http://secunia.com/secunia_research/2007-55/
- SUSE-SR:2007:014vendor-advisory
- 36991vdb-entry
- ADV-2007-2080vdb-entry
- [MPlayer-announce] 20070605 MPlayer 1.0rc1try3 releasedmailing-list
- 24339vdb-entry
- 25940third-party-advisory
- 25713third-party-advisory
- http://svn.mplayerhq.hu/mplayer/trunk/stream/stream_cddb.c?r1=23287&r2=23470&diff_format=u
- DSA-1313vendor-advisory
- 26207third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.