CVE-2008-0630: Buffer overflow in url.c in MPlayer 1.0rc2 and SVN before r25823 allows remote attackers to execute arbitrary code via a crafted URL that prevents the IPv6…

PriorityP432medium6.8CVSS 2.0

AVNACMAuNCPIPAP

EPSS

3.88%

89.1th percentile

Buffer overflow in url.c in MPlayer 1.0rc2 and SVN before r25823 allows remote attackers to execute arbitrary code via a crafted URL that prevents the IPv6 parsing code from setting a pointer to NULL, which causes the buffer to be reused by the unescape code.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
debian	mplayer	< mplayer 1.0~rc2-8 (bookworm)	mplayer 1.0~rc2-8 (bookworm)
mplayer	mplayer	—	—
mplayer	mplayer	>= 0 < 1.0~rc2-8	1.0~rc2-8
mplayer	mplayer	>= 0 < 1.0~rc2-8	1.0~rc2-8
mplayer	mplayer	>= 0 < 1.0~rc2-8	1.0~rc2-8
mplayer	mplayer	>= 0 < 1.0~rc2-8	1.0~rc2-8

CVSS provenance

nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

osv6.8MEDIUM

vendor_debian6.8MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.