CVE-2007-2948

Published: 7 June 2007

Multiple stack-based buffer overflows in stream/stream_cddb.c in MPlayer before 1.0rc1try3 allow remote attackers to execute arbitrary code via a CDDB entry with a long (1) album title or (2) category.

Priority

Status

Package	Release	Status
mplayer Launchpad, Ubuntu, Debian	dapper	Released (2:0.99+1.0pre7try2+cvs20060117-0ubuntu8.1)
	edgy	Released (2:0.99+1.0pre8-0ubuntu8.2)
	feisty	Released (1.0~rc1-0ubuntu9.1)
	gutsy	Not vulnerable
	upstream	Released

References

https://www.cve.org/CVERecord?id=CVE-2007-2948
NVD
Launchpad
Debian

Bugs

https://bugs.launchpad.net/ubuntu/+source/mplayer/+bug/118855

Join the discussion

Ubuntu security updates mailing list
Security announcements mailing list

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›