CVE-2004-0386
NoneCVSS
—
EPSS
27.0%
Published
May 4, 2004
CISA due date
—
The record
Buffer overflow in the HTTP parser for MPlayer 1.0pre3 and earlier, 0.90, and 0.91 allows remote attackers to execute arbitrary code via a long Location header.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | mplayer | 0 | 1.0~pre6a-1 |
| Debian:12 | mplayer | 0 | 1.0~pre6a-1 |
| Debian:13 | mplayer | 0 | 1.0~pre6a-1 |
Related vulnerabilities
- CVE-2011-3625 Stack-based buffer overflow in the sub_read_line_sami function in subreader.c in MPlayer… Also affects mplayer
- CVE-2013-6933 The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2011.08.13… Also affects mplayer
- CVE-2008-3827 Multiple integer underflows in the Real demuxer (demux_real.c) in MPlayer 1.0_rc2 and… Also affects mplayer
- CVE-2008-1558 Uncontrolled array index in the sdpplin_parse function in stream/realrtsp/sdpplin.c in… Also affects mplayer
- CVE-2007-4938 Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows… Also affects mplayer