CVE-2008-0486: mplayer Numeric Errors

EPSS trend

Probability

5.37%

Chance of exploitation in the next 30 days

Percentile

93%

Versus all other CVEs

30-day change

No change 0.00 pp

From 5.37% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

1 found

referenceUnverified
Exploit Reference (coresecurity.com)
Maturity: unknown

References

34 links

securityreason.com/securityalert/3608Third Party AdvisoryX Refsource SREASON
secunia.com/advisories/28989Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.vupen.com/english/advisories/2008/0406/referencesVDB EntryX Refsource VUPEN
lists.grok.org.uk/pipermail/full-disclosure/2008-February/060033.htmlMailing ListX Refsource FULLDISC
secunia.com/advisories/28918Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.vupen.com/english/advisories/2008/0421VDB EntryX Refsource VUPEN
www.securityfocus.com/archive/1/487501/100/0/threadedMailing ListX Refsource BUGTRAQ
www.mplayerhq.hu/design7/news.htmlX Refsource CONFIRM
www.mandriva.com/security/advisories?name=MDVSA-2008:046Vendor AdvisoryX Refsource MANDRIVA
www.mandriva.com/security/advisories?name=MDVSA-2008:045Vendor AdvisoryX Refsource MANDRIVA

Show all 34 references

secunia.com/advisories/28955Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/28779Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.coresecurity.com?action=item&id=2103X Refsource MISCExploit
secunia.com/advisories/29307Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/31393Third Party AdvisoryX Refsource SECUNIA
bugzilla.redhat.com/show_bug.cgi?id=431541X Refsource CONFIRM
security.gentoo.org/glsa/glsa-200802-12.xmlVendor AdvisoryX Refsource GENTOO
secunia.com/advisories/29601Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.debian.org/security/2008/dsa-1496Vendor AdvisoryX Refsource DEBIAN
lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/29141Third Party AdvisoryX Refsource SECUNIAVendor Advisory
security.gentoo.org/glsa/glsa-200803-16.xmlVendor AdvisoryX Refsource GENTOO
www.redhat.com/archives/fedora-package-announce/2008-February/msg00442.htmlVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/29323Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.redhat.com/archives/fedora-package-announce/2008-February/msg00395.htmlVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/28956Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.debian.org/security/2008/dsa-1536Vendor AdvisoryX Refsource DEBIAN
www.securityfocus.com/bid/27441VDB EntryX Refsource BID
sourceforge.net/project/shownotes.php?group_id=9655&release_id=574735X Refsource CONFIRM
bugs.gentoo.org/show_bug.cgi?id=209106X Refsource CONFIRM
bugs.xine-project.org/show_bug.cgi?id=38X Refsource CONFIRM
secunia.com/advisories/28801Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.ubuntu.com/usn/usn-635-1Vendor AdvisoryX Refsource UBUNTU
security-tracker.debian.org/tracker/CVE-2008-0486Advisory

Related vulnerabilities

RoutineCVE-2008-5616mplayer +1 more17y agomplayer mplayerStack-based buffer overflow in the demux_open_vqf function in libmpdemux/demux_vqf.c in MPlayer 1.0 rc2 before r28150 allows remote attackers to execute arbitrary code via a malformed TwinVQ file.CVSS10.0CriticalEPSS7.69%RoutineCVE-2008-5248xine · xine-lib17y agoxine xine-libxine-lib before 1.1.15 allows remote attackers to cause a denial of service (crash) via "MP3 files with metadata consisting only of separators."CVSS4.3MediumEPSS1.21%RoutineCVE-2008-5247xine · xine-lib17y agoxine xine-libThe real_parse_audio_specific_data function in demux_real.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, uses an untrusted height (aka codec_data_length) value as a divisor, which allow remote attackers to cause a denial of service (divide-by-zero error and crash) via a zero value.CVSS4.3MediumEPSS1.51%RoutineCVE-2008-5246xine · xine-lib17y agoxine xine-libMultiple heap-based buffer overflows in xine-lib before 1.1.15 allow remote attackers to execute arbitrary code via vectors that send ID3 data to the (1) id3v22_interp_frame and (2) id3v24_interp_frame functions in src/demuxers/id3.c. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.CVSS9.3CriticalEPSS5.69%RoutineCVE-2008-5245xine · xine-lib17y agoxine xine-libxine-lib before 1.1.15 performs V4L video frame preallocation before ascertaining the required length, which has unknown impact and attack vectors, possibly related to a buffer overflow in the open_video_capture_device function in src/input/input_v4l.c.CVSS9.3CriticalEPSS1.75%RoutineCVE-2008-5244xine · xine-lib +2 more17y agoxine xine-libUnspecified vulnerability in xine-lib before 1.1.15 has unknown impact and attack vectors related to libfaad. NOTE: due to the lack of details, it is not clear whether this is an issue in xine-lib or in libfaad.CVSS10.0CriticalEPSS2.01%

All vulnerabilities inmplayer xine-lib

CVE-2008-0486: mplayer Numeric Errors

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References