CVE-2007-2948

published 2007-06-07

CVE-2007-2948: Multiple stack-based buffer overflows in stream/stream_cddb.c in MPlayer before 1.0rc1try3 allow remote attackers to execute arbitrary code via a CDDB entry…

Priority P3 45 critical 9.3 CVSS 2.0

AV N AC M Au N C C I C A C

Multiple stack-based buffer overflows in stream/stream_cddb.c in MPlayer before 1.0rc1try3 allow remote attackers to execute arbitrary code via a CDDB entry with a long (1) album title or (2) category.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
debian	mplayer	< mplayer 1.0~rc1-14 (bookworm)	mplayer 1.0~rc1-14 (bookworm)
mplayer	mplayer	—	—
mplayer	mplayer	>= 0 < 1.0~rc1-14	1.0~rc1-14
mplayer	mplayer	>= 0 < 1.0~rc1-14	1.0~rc1-14
mplayer	mplayer	>= 0 < 1.0~rc1-14	1.0~rc1-14
mplayer	mplayer	>= 0 < 1.0~rc1-14	1.0~rc1-14

CVSS provenance

nvd v2.0 9.3 CRITICAL AV:N/AC:M/Au:N/C:C/I:C/A:C

osv 9.3 CRITICAL

vendor_debian 9.3 CRITICAL

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.