NVD

Id
461  
Name
CVE-2008-0486  
Description
Array index vulnerability in libmpdemux/demux_audio.c in MPlayer 1.0rc2 and SVN before r25917, and possibly earlier versions, as used in Xine-lib 1.1.10, might allow remote attackers to execute arbitrary code via a crafted FLAC tag, which triggers a buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-02-05  
Modified Date
2011-03-07  
Seq
2008-0486  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
3121 461 CVE-2008-0486 http://bugs.gentoo.org/show_bug.cgi?id=209106  View
3122 461 CVE-2008-0486 http://bugs.xine-project.org/show_bug.cgi?id=38  View
3123 461 CVE-2008-0486 20080204 CORE-2007-1218: MPlayer 1.0rc2 buffer overflow vulnerability  View
3124 461 CVE-2008-0486 SUSE-SR:2008:006  View
3125 461 CVE-2008-0486 GLSA-200802-12  View
3126 461 CVE-2008-0486 GLSA-200803-16  View
3127 461 CVE-2008-0486 3608  View
3128 461 CVE-2008-0486 http://sourceforge.net/project/shownotes.php?group_id=9655&release_id=574735  View
3129 461 CVE-2008-0486 http://www.coresecurity.com/?action=item&id=2103  View
3130 461 CVE-2008-0486 DSA-1496  View
3131 461 CVE-2008-0486 DSA-1536  View
3132 461 CVE-2008-0486 MDVSA-2008:045  View
3133 461 CVE-2008-0486 MDVSA-2008:046  View
3134 461 CVE-2008-0486 http://www.mplayerhq.hu/design7/news.html  View
3135 461 CVE-2008-0486 20080204 CORE-2007-1218: MPlayer 1.0rc2 buffer overflow vulnerability  View
3136 461 CVE-2008-0486 27441  View
3137 461 CVE-2008-0486 USN-635-1  View
3138 461 CVE-2008-0486 ADV-2008-0406  View
3139 461 CVE-2008-0486 ADV-2008-0421  View
3140 461 CVE-2008-0486 https://bugzilla.redhat.com/show_bug.cgi?id=431541  View
3141 461 CVE-2008-0486 FEDORA-2008-1543  View
3142 461 CVE-2008-0486 FEDORA-2008-1581  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
48696 JVNDB-2008-004006 Xine-lib で使用される MPlayer などにおける任意のコードを実行される脆弱性 Xine-lib で使用される MPlayer および SVN の libmpdemux/demux_audio.c は、配列インデックスエラーにより、任意のコードを実行される脆弱性が存在します。 CVE-2008-0486 30599 CVE-2008-0486 461 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004006.html 2008-02-05 2012-09-25 View