CVE-2008-0629 buffer overflow via crafted cddb title

Bug #191412 reported by Laurent Bigonville
254
Affects Status Importance Assigned to Milestone
mplayer (Debian)
Fix Released
Unknown
mplayer (Ubuntu)
New
Undecided
Unassigned

Bug Description

Binary package hint: mplayer

Hi,
the following CVE (Common Vulnerabilities & Exposures) id was
published for mplayer.

CVE-2008-0629[0]:
| Buffer overflow in stream_cddb.c in MPlayer 1.0rc2 and SVN before
| r25824 allows remote user-assisted attackers to execute arbitrary code
| via a CDDB database entry containing a long album title.

If you fix this vulnerability please also include the CVE id
in your changelog entry.

A fix for this can be found on:
http://svn.mplayerhq.hu/mplayer/trunk/stream/stream_cddb.c?r1=25820&r2=25824

CVE References

Changed in mplayer:
status: Unknown → Fix Released
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.