Back to Database
Status published
Medium
CVE-2008-0630
Buffer overflow in url.c in MPlayer 1.0rc2 and SVN before...
Vulnerability Description
Buffer overflow in url.c in MPlayer 1.0rc2 and SVN before r25823 allows remote attackers to execute arbitrary code via a crafted URL that prevents the IPv6 parsing code from setting a pointer to NULL, which causes the buffer to be reused by the unescape code.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-0630
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.mplayerhq.hu/design7/news.html
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:045
- http://secunia.com/advisories/28955
- http://www.securityfocus.com/bid/27766
- http://secunia.com/advisories/29307
- http://www.debian.org/security/2008/dsa-1496
- http://security.gentoo.org/glsa/glsa-200803-16.xml
- http://secunia.com/advisories/28956
More from mplayer
View All →CVE-2008-5616
Stack-based buffer overflow in the demux_open_vqf function in libmpdemux/demux_vqf.c in...
Critical
10
CVE-2008-4610
MPlayer allows remote attackers to cause a denial of service...
Medium
5
CVE-2008-3827
Multiple integer underflows in the Real demuxer (demux_real.c) in MPlayer...
Critical
9.3
CVE-2008-1558
Uncontrolled array index in the sdpplin_parse function in stream/realrtsp/sdpplin.c in...
Critical
10
CVE-2008-0629
Buffer overflow in stream_cddb.c in MPlayer 1.0rc2 and SVN before...
Medium
4.3
Affected Vendor
mplayer
View all reports →Affected Software
mplayer
Vulnerable Versions:
1.02rc2
Timeline
Official Publish:
February 6th, 2008
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.