Summary
It was discovered that MPlayer could be made to divide by zero when
processing certain malformed media files. If a user were tricked into
opening a specially crafted media file, an attacker could possibly use
this issue to cause MPlayer to crash, resulting in a denial of service.
(CVE-2022-38850, CVE-2022-38860, CVE-2022-38865)
It was discovered that MPlayer could be made to read out of bounds when
processing certain malformed media files. If a user were tricked into
opening a specially crafted media file, an attacker could possibly use
this issue to cause MPlayer to crash, resulting in a denial of service.
(CVE-2022-38851)
It was discovered that MPlayer could be made to write out of bounds when
processing certain malformed media files. If a user were tricked into
opening a specially crafted media file, an attacker could possibly use
this issue to cause MPlayer to crash, resulting in a denial of service, or
possibly execute arbitrary code. (CVE-2022-38855, CVE-2022-38858,
CVE-2022-38863, CVE-2022-38864, CVE-2022-38866)
It was discovered that MPlayer did not properly managed memory when
processing certain malformed media files. If a user were tricked into
opening a specially crafted media file, an attacker could possibly use
this issue to cause MPlayer to crash, resulting in a denial of service, or
possibly execute arbitrary code. (CVE-2022-38861)
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | mplayer | 2:1.3.0-7ubuntu0.2 |
| Ubuntu · 20.04 LTS 20.04:LTS | mplayer | 2:1.3.0-8+deb10u1build0.20.04.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | mplayer | 2:1.4+ds1-3ubuntu0.1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | mplayer | 2:1.2.1-1ubuntu1.1+esm1 |
Vulnerabilities 10
-
Unscored —
The MPlayer Project mencoder SVN-r38374-13.0.1 is vulnerable to Divide By Zero via the function config () of llibmpcode…
-
Unscored —
Certain The MPlayer Project products are vulnerable to Out-of-bounds Read via function read_meta_record() of mplayer/li…
-
Unscored —
Certain The MPlayer Project products are vulnerable to Buffer Overflow via function gen_sh_video () of mplayer/libmpdem…
-
Unscored —
Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mov_build_index() of libmpdemux/dem…
-
Unscored —
Certain The MPlayer Project products are vulnerable to Divide By Zero via function demux_open_avi() of libmpdemux/demux…
-
Unscored —
The MPlayer Project mplayer SVN-r38374-13.0.1 is vulnerable to memory corruption via function free_mp_image() of libmpc…
-
Unscored —
Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mp_getbits() of libmpdemux/mpeg_hdr…
-
Unscored —
Certain The MPlayer Project products are vulnerable to Buffer Overflow via the function mp_unescape03() of libmpdemux/m…
-
Unscored —
Certain The MPlayer Project products are vulnerable to Divide By Zero via the function demux_avi_read_packet of libmpde…
-
Unscored —
Certain The MPlayer Project products are vulnerable to Buffer Overflow via read_avi_header() of libmpdemux/aviheader.c …
References
-
report
https://ubuntu.com/security/CVE-2022-38850
-
report
https://ubuntu.com/security/CVE-2022-38851
-
report
https://ubuntu.com/security/CVE-2022-38855
-
report
https://ubuntu.com/security/CVE-2022-38858
-
report
https://ubuntu.com/security/CVE-2022-38860
-
report
https://ubuntu.com/security/CVE-2022-38861
-
report
https://ubuntu.com/security/CVE-2022-38863
-
report
https://ubuntu.com/security/CVE-2022-38864
-
report
https://ubuntu.com/security/CVE-2022-38865
-
report
https://ubuntu.com/security/CVE-2022-38866