5

CVE-2008-4610: mplayer Resource Management Errors

CVSS: 5.0v2.0MediumModified
AliasesDEBIAN-CVE-2008-4610
Published 20-10-2008Last modified 07-08-2024
Open JSON

Vulnerability summary

CVE-2008-4610 is a medium (CVSS 5.0) Resource Management Errors vulnerability in mplayer. EPSS estimates a 9.28% chance of exploitation in the next 30 days, higher than 95.3% of scored vulnerabilities. 2 public exploits are recorded.

Overall risk
32/100
0100
Medium · default modelHow is this calculated?
CVSS score
5.0/10
010
Medium · v2.0 (NVD)
EPSS score
9.28%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits2exploit-database

Advisory lineage

Upstream 0 · Downstream 1
DTSA-181-1

Timeline

  1. 20-10-2008
    PublishedVulnerability first disclosed.
  2. 07-08-2024
    Last modifiedVulnerability information updated.

Description

MPlayer allows remote attackers to cause a denial of service (application crash) via (1) a malformed AAC file, as demonstrated by lol-vlc.aac; or (2) a malformed Ogg Media (OGM) file, as demonstrated by lol-ffplay.ogm, different vectors than CVE-2007-6718.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

9.28%

Chance of exploitation in the next 30 days

Percentile

95%

Versus all other CVEs

30-day change

0.00 pp

From 9.28% on 20-09-2026

20-09-202620-10-2026
EPSS score
9.28%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found
  • exploit-databasedoslinuxVerified

    MPlayer - '.AAC' File Handling Denial of Service

    Maturity: poc

  • exploit-databasedoslinuxVerified

    MPlayer - '.OGM' File Handling Denial of Service

    Maturity: poc

Weaknesses

CWE · root cause

Affected systems

Debian2 products
  • ffmpeg< 7:2.4.1-1
  • mplayer< 1.0~rc2-20
Mplayer1 product
  • mplayer≤ 1.0_rc1 | 0.90 | 0.90_pre | 0.90_rc | 0.90_rc4 | 0.91 | 0.92 | 0.92.1 | 0.92_cvs | 1.0_pre1 | 1.0_pre2 | 1.0_pre3 | 1.0_pre3try2 | 1.0_pre4 | 1.0_pre5 | 1.0_pre5try1 | 1.0_pre5try2 | 1.0_pre6 | 1.0_pre7 | 1.0_pre7try2

2 vendors · 3 products

References

4 links