medium5.0Public exploit code
CVE-2008-4610
MPlayer allows remote attackers to cause a denial of service (application crash) via (1) a malformed AAC file, as demonstrated by lol-vlc.aac; or (2) a malform…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- MPlayer - '.OGM' File Handling Denial of Service2008-10-07 · dos · linux · Verified
- MPlayer - '.AAC' File Handling Denial of Service2008-10-07 · dos · linux · Verified
Impact
MPlayer allows remote attackers to cause a denial of service (application crash) via (1) a malformed AAC file, as demonstrated by lol-vlc.aac; or (2) a malformed Ogg Media (OGM) file, as demonstrated by lol-ffplay.ogm, different vectors than CVE-2007-6718.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mplayer | Mplayer | through 1.0_rc1 Versions 0.90, 0.90_pre, 0.90_rc, 0.90_rc4, 0.91 |