Security Advisory

CVE-2008-0486

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2008-02-05 11:00:00
Last updated 2024-08-07 07:46:55
Assigner mitre
State PUBLISHED

Description

Array index vulnerability in libmpdemux/demux_audio.c in MPlayer 1.0rc2 and SVN before r25917, and possibly earlier versions, as used in Xine-lib 1.1.10, might allow remote attackers to execute arbitrary code via a crafted FLAC tag, which triggers a buffer overflow.