vulnwire
9.3crit

CVE-2007-2948

Multiple stack-based buffer overflows in stream/stream_cddb.c in MPlayer before 1.0rc1try3 allow remote attackers to execute arbitrary code…

Published 19 y ago · modified 4 mo ago · JSON

CVSS
9.3
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
5.7%
percentile 93%
Public exploits
0
none known

Multiple stack-based buffer overflows in stream/stream_cddb.c in MPlayer before 1.0rc1try3 allow remote attackers to execute arbitrary code via a CDDB entry with a long (1) album title or (2) category.

Exploit prediction (EPSS)

5.75% probability of exploitation in the next 30 days, higher than 93% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.09.3AV:N/AC:M/Au:N/C:C/I:C/A:C

References

  • exchange.xforce.ibmcloud.com /vulnerabilities/34749 · vdb-entry, x_refsource_XF, x_transferred
  • secunia.com /advisories/26083 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • mandriva.com /security/advisories?name=MDKSA-2007:143 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
  • mplayerhq.hu /design7/news.html · x_refsource_CONFIRM, x_transferred
  • secunia.com /advisories/24302 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • security.gentoo.org /glsa/glsa-200707-07.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
  • secunia.com /secunia_research/2007-55/ · x_refsource_MISC, x_transferred
  • novell.com /linux/security/advisories/2007_14_sr.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • osvdb.org /36991 · vdb-entry, x_refsource_OSVDB, x_transferred
  • vupen.com /english/advisories/2007/2080 · vdb-entry, x_refsource_VUPEN, x_transferred
  • lists.mplayerhq.hu /pipermail/mplayer-announce/2007-June/000066.html · mailing-list, x_refsource_MLIST, x_transferred
  • securityfocus.com /bid/24339 · vdb-entry, x_refsource_BID, x_transferred
  • secunia.com /advisories/25940 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/25713 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • svn.mplayerhq.hu /mplayer/trunk/stream/stream_cddb.c?r1=23287&r2=23470&diff_format=u · x_refsource_CONFIRM, x_transferred
  • debian.org /security/2007/dsa-1313 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • secunia.com /advisories/26207 · third-party-advisory, x_refsource_SECUNIA, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.