high7.5Public exploit code
CVE-2003-0835
Multiple buffer overflows in asf_http_request of MPlayer before 0.92 allows remote attackers to execute arbitrary code via an ASX header with a long hostname.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- MPlayer 0.9/1.0 - Streaming ASX Header Parsing Buffer Overrun2003-09-25 · remote · linux · Verified
Impact
Multiple buffer overflows in asf_http_request of MPlayer before 0.92 allows remote attackers to execute arbitrary code via an ASX header with a long hostname.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mplayer | Mplayer | Versions 0.90, 0.90_pre, 0.90_rc, 0.90_rc4, 0.91, 1.0_pre1 |
References
- NVD record
- CVE.org record
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000760
- http://marc.info/?l=bugtraq&m=106454257221455&w=2
- http://marc.info/?l=bugtraq&m=106460912721618&w=2
- http://marc.info/?l=bugtraq&m=106485005213109&w=2
- http://www.mplayerhq.hu/homepage/design6/news.html
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000760
- http://marc.info/?l=bugtraq&m=106454257221455&w=2
- http://marc.info/?l=bugtraq&m=106460912721618&w=2
- http://marc.info/?l=bugtraq&m=106485005213109&w=2
- http://www.mplayerhq.hu/homepage/design6/news.html