Evil-DB LogoEvil-DB
← All CVEs

CVE-2008-3827

high · 9.3

Multiple integer underflows in the Real demuxer (demux_real.c) in MPlayer 1.0_rc2 and earlier allow remote attackers to cause a denial of service (process termination) and possibly execute arbitrary code via a crafted video file that causes the stream_read function to read or write arbitrary memory.

9.3
CVSS
10.9%
EPSS (exploit prob.)
96th
EPSS percentile
2008-09-29
Published

AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

CWE-189

Affected products

VendorProductAffected versions
mplayermplayer<= 1.0_rc2
mplayermplayer0.90
mplayermplayer0.90_pre
mplayermplayer0.90_rc
mplayermplayer0.90_rc4
mplayermplayer0.91
mplayermplayer0.92
mplayermplayer0.92.1
mplayermplayer0.92_cvs
mplayermplayer1.0_pre1
mplayermplayer1.0_pre2
mplayermplayer1.0_pre3
mplayermplayer1.0_pre3try2
mplayermplayer1.0_pre4
mplayermplayer1.0_pre5
mplayermplayer1.0_pre5try1
mplayermplayer1.0_pre5try2
mplayermplayer1.0_pre6
mplayermplayer1.0_pre7
mplayermplayer1.0_pre7try2
mplayermplayer1.0_rc1

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2008-3827