Description
Multiple stack-based buffer overflows in stream/stream_cddb.c in MPlayer before 1.0rc1try3 allow remote attackers to execute arbitrary code via a CDDB entry with a long (1) album title or (2) category.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | mplayer | 1.0~rc1-14 | — |
| Debian 13 | mplayer | 1.0~rc1-14 | — |
| Debian 12 | mplayer | 1.0~rc1-14 | — |
| Debian 4.0 | mplayer | 1.0~rc1-12etch1 | DSA-1313-1 |
Advisories 1
- DSA-1313-1 mplayer Debian Security (DSA / DLA) · Mar 9, 2026
References
- mplayer-cddb-bo(34749) vdb-entry
- 26083 third-party-advisory
- MDKSA-2007:143 vendor-advisory
- http://www.mplayerhq.hu/design7/news.html
- 24302 third-party-advisory
- GLSA-200707-07 vendor-advisory
- http://secunia.com/secunia_research/2007-55/
- SUSE-SR:2007:014 vendor-advisory
- 36991 vdb-entry
- ADV-2007-2080 vdb-entry
- [MPlayer-announce] 20070605 MPlayer 1.0rc1try3 released mailing-list
- 24339 vdb-entry
- 25940 third-party-advisory
- 25713 third-party-advisory
- http://svn.mplayerhq.hu/mplayer/trunk/stream/stream_cddb.c?r1=23287&r2=23470&diff_format=u
- DSA-1313 vendor-advisory
- 26207 third-party-advisory