Skip to content
Noroxi

mplayer records

33 published records for vendor mplayer.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
24
With a fix record
69.7%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    33 records
    • CVE-2004-0386
      48Plan

      Buffer overflow in the HTTP parser for MPlayer 1.0pre3 and earlier, 0.90, and 0.91 allows remote attackers to execute arbitrary code via a l

      CriticalCVSS 10.0Proof of conceptEPSS 27%

      mplayer · mplayerMay 4, 2004

    • CVE-2008-1558
      45Plan

      Uncontrolled array index in the sdpplin_parse function in stream/realrtsp/sdpplin.c in MPlayer 1.0 rc2 allows remote attackers to overwrite

      CriticalCVSS 10.0Proof of conceptEPSS 17%

      mplayer · mplayerMar 31, 2008

    • CVE-2004-0659
      45Plan

      Buffer overflow in TranslateFilename for common.c in MPlayer 1.0pre4 allows remote attackers to execute arbitrary code via a long file name.

      CriticalCVSS 10.0Proof of conceptEPSS 16%

      mplayer · mplayerAug 6, 2004

    • CVE-2008-5616
      42Plan

      Stack-based buffer overflow in the demux_open_vqf function in libmpdemux/demux_vqf.c in MPlayer 1.0 rc2 before r28150 allows remote attacker

      CriticalCVSS 10.0No exploitEPSS 8%

      mplayer · mplayerDec 16, 2008

    • CVE-2004-1309
      42Plan

      Heap-based buffer overflow in the demux_open_bmp function in demux_bmp.c for Unix MPlayer 1.0pre5 allows remote attackers to execute arbitra

      CriticalCVSS 10.0No exploitEPSS 5%

      mplayer · unix mplayerJan 10, 2005

    • CVE-2004-1187
      42Plan

      Heap-based buffer overflow in the pnm_get_chunk function for xine 0.99.2, and other packages such as MPlayer that use the same code, allows

      CriticalCVSS 10.0No exploitEPSS 5%

      mplayer · mplayerJan 10, 2005

    • CVE-2004-1310
      42Plan

      Stack-based buffer overflow in the asf_mmst_streaming.c functionality for MPlayer 1.0pre5 allows remote attackers to execute arbitrary code

      CriticalCVSS 10.0No exploitEPSS 5%

      mplayer · mplayerJan 10, 2005

    • CVE-2004-1311
      42Plan

      Integer overflow in the real_setup_and_get_header function in real.c for Unix MPlayer 1.0pre5 allows remote attackers to cause a denial of s

      CriticalCVSS 10.0No exploitEPSS 5%

      mplayer · mplayerJan 10, 2005

    • CVE-2004-0433
      42Plan

      Multiple buffer overflows in the Real-Time Streaming Protocol (RTSP) client for (1) MPlayer before 1.0pre4 and (2) xine lib (xine-lib) befor

      CriticalCVSS 10.0No exploitEPSS 5%

      mplayer · mplayerAug 18, 2004

    • CVE-2004-1285
      41Plan

      Buffer overflow in the get_header function in asf_mmst_streaming.c for MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via

      CriticalCVSS 10.0No exploitEPSS 5%

      mplayer · mplayerJan 10, 2005

    • CVE-2008-4866
      41Plan

      Multiple buffer overflows in libavformat/utils.c in FFmpeg 0.4.9 before r14715, as used by MPlayer, allow context-dependent attackers to hav

      CriticalCVSS 10.0No exploitEPSS 5%

      ffmpeg · ffmpegOct 31, 2008

    • CVE-2008-4867
      41Plan

      Buffer overflow in libavcodec/dca.c in FFmpeg 0.4.9 before r14917, as used by MPlayer, allows context-dependent attackers to have an unknown

      CriticalCVSS 10.0No exploitEPSS 2%

      ffmpeg · ffmpegOct 31, 2008

    • CVE-2008-4869
      41Plan

      FFmpeg 0.4.9, as used by MPlayer, allows context-dependent attackers to cause a denial of service (memory consumption) via unknown vectors,

      CriticalCVSS 10.0No exploitEPSS 2%

      ffmpeg · ffmpegOct 31, 2008

    • CVE-2008-4868
      41Plan

      Unspecified vulnerability in the avcodec_close function in libavcodec/utils.c in FFmpeg 0.4.9 before r14787, as used by MPlayer, has unknown

      CriticalCVSS 10.0No exploitEPSS 2%

      ffmpeg · ffmpegOct 31, 2008

    • CVE-2004-1188
      41Plan

      The pnm_get_chunk function in xine 0.99.2 and earlier, and other packages such as MPlayer that use the same code, does not properly verify t

      CriticalCVSS 10.0No exploitEPSS 2%

      mplayer · mplayerJan 10, 2005

    • CVE-2008-3827
      40Plan

      Multiple integer underflows in the Real demuxer (demux_real.c) in MPlayer 1.0_rc2 and earlier allow remote attackers to cause a denial of se

      CriticalCVSS 9.3No exploitEPSS 11%

      mplayer · mplayerSep 29, 2008

    • CVE-2008-0485
      40Plan

      Array index error in libmpdemux/demux_mov.c in MPlayer 1.0 rc2 and earlier might allow remote attackers to execute arbitrary code via a Quic

      CriticalCVSS 9.3Proof of conceptEPSS 9%

      mplayer · mplayerFeb 5, 2008

    • CVE-2007-2948
      39Monitor

      Multiple stack-based buffer overflows in stream/stream_cddb.c in MPlayer before 1.0rc1try3 allow remote attackers to execute arbitrary code

      CriticalCVSS 9.3No exploitEPSS 6%

      mplayer · mplayerJun 7, 2007

    • CVE-2007-4938
      35Monitor

      Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service (app

      HighCVSS 7.6Proof of conceptEPSS 16%

      ibm · aixSep 18, 2007

    • CVE-2007-1246
      32Monitor

      The DMO_VideoDecoder_Open function in loader/dmo/DMO_VideoDecoder.c in MPlayer 1.0rc1 and earlier, as used in xine-lib, does not set the biS

      HighCVSS 7.6No exploitEPSS 6%

      mplayer · mplayerMar 3, 2007

    • CVE-2006-6172
      32Monitor

      Buffer overflow in the asmrp_eval function in the RealMedia RTSP stream handler (asmrp.c) for Real Media input plugin, as used in (1) xine/x

      HighCVSS 7.5No exploitEPSS 5%

      xine · real media input pluginNov 30, 2006

    • CVE-2008-0486
      32Monitor

      Array index vulnerability in libmpdemux/demux_audio.c in MPlayer 1.0rc2 and SVN before r25917, and possibly earlier versions, as used in Xin

      HighCVSS 7.5No exploitEPSS 5%

      mplayer · mplayerFeb 5, 2008

    • CVE-2003-0835
      31Monitor

      Multiple buffer overflows in asf_http_request of MPlayer before 0.92 allows remote attackers to execute arbitrary code via an ASX header wit

      HighCVSS 7.5Proof of conceptEPSS 5%

      mplayer · mplayerNov 17, 2003

    • CVE-2005-1195
      31Monitor

      Multiple heap-based buffer overflows in the code used to handle (1) MMS over TCP (MMST) streams or (2) RealMedia RTSP streams in xine-lib be

      HighCVSS 7.5No exploitEPSS 4%

      xine · xine-libMay 2, 2005

    • CVE-2006-0579
      31Monitor

      Multiple integer overflows in (1) the new_demux_packet function in demuxer.h and (2) the demux_asf_read_packet function in demux_asf.c in MP

      HighCVSS 7.5No exploitEPSS 4%

      mplayer · mplayerFeb 7, 2006