CVE-2008-1558: mplayer Numeric Errors
Vulnerability summary
CVE-2008-1558 is a high (CVSS 10.0) Numeric Errors vulnerability in mplayer. EPSS estimates a 16.80% chance of exploitation in the next 30 days, higher than 97% of scored vulnerabilities. 1 public exploit is recorded.
Public exploit (exploit-database, 25-03-2008)
Source freshness unavailable
How is this decided?Timeline
- 31-03-2008PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Uncontrolled array index in the sdpplin_parse function in stream/realrtsp/sdpplin.c in MPlayer 1.0 rc2 allows remote attackers to overwrite memory and execute arbitrary code via a large streamid SDP parameter. NOTE: this issue has been referred to as an integer overflow.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
16.80%
Chance of exploitation in the next 30 days
Percentile
97%
Versus all other CVEs
30-day change
No change 0.00 pp
From 16.80% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
1 foundMPlayer 1.0 rc2 - 'sdpplin_parse()' Array Indexing Buffer Overflow (PoC)
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.
Debian1 product
- mplayer< 1.0~rc2-8+lenny1 | < 1.0~rc1-12etch3 | < 1.0~rc2-10
Mplayer1 product
- mplayer1.0_rc2
2 vendors · 2 products
