ignore security and it'll go away

Register | Login

FilesNewsUsersAuthors

Home Files News About Contact Add New

Showing 1 - 1 of 1

Files

iDEFENSE Security Advisory 2004-12-16.4

Posted Dec 30, 2004

Authored by iDefense Labs | Site idefense.com

iDEFENSE Security Advisory 12.16.2004-4 - Remote exploitation of a heap overflow vulnerability in Unix MPlayer could allow attackers to gain access to the computer. The vulnerability specifically exists due to a lack of bounds checking within the demux_open_bmp() routine defined in /libmpdemux/demux_bmp.c. If a specially crafted file specifies a large value for the biClrUsed field, an overflow is triggered in stream_read().

tags | advisory, remote, overflow

systems | unix

MD5 | 7c969c0d4f32b1e66552c76570fa7bf7

Download | Favorite | Comments (0)