CVE-2008-0486

Advisory lineage Upstream: 0 Downstream: 4
Modified
Published: 05 Feb 2008, 11:00
Last modified:07 Aug 2024, 07:46

Vulnerability Summary

Overall Risk (default)
medium
41/100
CVSS Score
7.5 HIGH
v2.0 (nvd)
EPSS Score
4.86% LOW
5% probability +0.29%
KEV
Not listed
Ransomware
No reports
Public exploits
1 found
Dark Web
Not detected

Timeline

05 Feb 2008, 11:00
Published
Vulnerability first disclosed
07 Aug 2024, 07:46
Last Modified
Vulnerability information updated

Description

Array index vulnerability in libmpdemux/demux_audio.c in MPlayer 1.0rc2 and SVN before r25917, and possibly earlier versions, as used in Xine-lib 1.1.10, might allow remote attackers to execute arbitrary code via a crafted FLAC tag, which triggers a buffer overflow.

CVSS Metrics

  • v2.0•HIGH•Score: 7.5AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS Trends

Current EPSS score: 4.86%• Percentile: 90%

Techniques & Countermeasures

  • CWE-189•Numeric Errors

    Weaknesses in this category are related to improper calculation or conversion of numbers.

Affected Systems

  • mplayer•mplayer

    1.02rc2

  • xine•xine-lib

    1.1.10

References (33)