Vulnerability Details CVE-2005-2718
Buffer overflow in ad_pcm.c in MPlayer 1.0pre7 and earlier allows remote attackers to execute arbitrary code via crafted PCM audio data, as demonstrated using a video file with an audio header containing a large value in a stream format (strf) chunk.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.041
EPSS Ranking 88.1%
CVSS Severity
CVSS v2 Score 7.5
References
- http://marc.info/?l=full-disclosure&m=112484733122809&w=2
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:158
- http://www.securityfocus.com/bid/14652
- http://www.sven-tantau.de/public_files/mplayer/mplayer_20050824.txt
- https://bugs.gentoo.org/show_bug.cgi?id=103555
- http://marc.info/?l=full-disclosure&m=112484733122809&w=2
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:158
- http://www.securityfocus.com/bid/14652
- http://www.sven-tantau.de/public_files/mplayer/mplayer_20050824.txt
- https://bugs.gentoo.org/show_bug.cgi?id=103555