acknowledge the elephant in the room

Register | Login

FilesNewsUsersAuthors

Home Files News About Contact Add New

Showing 1 - 1 of 1

Files

iDEFENSE Security Advisory 2004-12-16.2

Posted Dec 30, 2004

Authored by iDefense Labs | Site idefense.com

iDEFENSE Security Advisory 12.16.2004-2 - Remote exploitation of a heap overflow vulnerability in Unix MPlayer could allow attackers to gain access to the computer. The vulnerability specifically exists due to a lack of bounds checking within the demux_open_bmp() routine defined in /libmpdemux/demux_bmp.c. If a specially crafted file specifies a large value for the biClrUsed field, an overflow is triggered in stream_read().

tags | advisory, remote, overflow

systems | unix

MD5 | 0d2fc3ba8fe14f5e6379a670da388d15

Download | Favorite | Comments (0)