Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Gentoo GLSA-200501-18: Normal VLC Media Player Buffer Underflow Issue

gentoo
Calendar Grey December 20, 2004
Scroller Gentoo
The Gentoo security advisory for MPlayer highlights several overflows posing risks of arbitrary code execution and denial of service, urging quick updates to protect systems from these threats
Multiple overflow vulnerabilities have been found in MPlayer, potentially resulting in remote executing of arbitrary code.

Summary

Gentoo Linux Security Advisory GLSA 200412-21 https://security.gentoo.org/ Severity: Normal Title: MPlayer: Multiple overflows Date: December 20, 2004 Bugs: #74473 ID: 200412-21

Synopsis ======= Multiple overflow vulnerabilities have been found in MPlayer, potentially resulting in remote executing of arbitrary code.
Background ========= MPlayer is a media player capable of handling multiple multimedia file formats.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 media-video/mplayer <= 1.0_pre5-r4 >= 1.0_pre5-r5
========== iDEFENSE, Ariel Berkman and the MPlayer development team found multiple vulnerabilities in MPlayer. These include potential heap overflows in R...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory gentoo code execution arbitrary code execution media player multiple overflows

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory gentoo code execution arbitrary code execution media player multiple overflows

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround