Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Gentoo 200509-01 Normal: MPlayer Heap Overflow Arbitrary Code Execution

gentoo
Calendar Grey September 1, 2005
Scroller Gentoo
Buffer overflow vulnerability in Gentoo's VLC media player may lead to unauthorized code execution. Users advised to update to latest version to mitigate risks.
A heap overflow in MPlayer might lead to the execution of arbitrary code.

Summary

Gentoo Linux Security Advisory GLSA 200509-01 https://security.gentoo.org/ Severity: Normal Title: MPlayer: Heap overflow in ad_pcm.c Date: September 01, 2005 Bugs: #103555 ID: 200509-01

Synopsis ======= A heap overflow in MPlayer might lead to the execution of arbitrary code.
Background ========= MPlayer is a media player capable of handling multiple multimedia file formats.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 media-video/mplayer < 1.0_pre7-r1 >= 1.0_pre7-r1
========== Sven Tantau discovered a heap overflow in the code handling the strf chunk of PCM audio streams.
Impact ===== An attacker could craft a malicious video or audio file which, when opened usin...

Read the Full Advisory

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround