Priority MEDIUM 47
Multiple unspecified vulnerabilities in FFmpeg 0.4.x through 0.6.x, as used in MPlayer 1.0 and other products, in Mandriva Linux 2009.0, 2010.0, and 2010.1; Corporate Server 4.0 (aka CS4.0); and Mandriva Enterprise Serve…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.02323 · Published 2011-05-20 · No fix listed
Priority MEDIUM 43
The VC-1 decoding functionality in FFmpeg before 0.5.4, as used in MPlayer and other products, does not properly restrict read operations, which allows remote attackers to have an unspecified impact via a crafted VC-1 fi…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.01695 · Published 2011-05-20 · No fix listed CWE-20
Priority LOW 37
FFmpeg before 0.5.4, as used in MPlayer and other products, allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via a malformed RealMedia…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.0423 · Published 2011-05-20 · No fix listed CWE-119
Priority LOW 37
flicvideo.c in libavcodec 0.6 and earlier in FFmpeg, as used in MPlayer and other products, allows remote attackers to execute arbitrary code via a crafted flic file, related to an "arbitrary offset dereference vulnerabi…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04179 · Published 2010-09-30 · No fix listed CWE-94
Priority LOW 35
FFmpeg before 0.5.4, as used in MPlayer and other products, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a malformed WMV file.
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.02968 · Published 2011-05-20 · No fix listed CWE-119
Priority LOW 34
Certain The MPlayer Project products are vulnerable to Buffer Overflow via function play() of libaf/af.c:639.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00353 · Published 2022-09-15 · No fix listed CWE-787
Priority LOW 27
The MPlayer Project v1.5 was discovered to contain a heap use-after-free resulting in a double free in the preinit function at libvo/vo_v4l2.c.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00938 · Published 2022-07-14 · No fix listed CWE-416
Priority LOW 25
Certain The MPlayer Project products are vulnerable to Buffer Overflow via read_avi_header() of libmpdemux/aviheader.c .
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00302 · Published 2022-09-15 · No fix listed CWE-787
Priority LOW 25
Certain The MPlayer Project products are vulnerable to Divide By Zero via the function demux_avi_read_packet of libmpdemux/demux_avi.c.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00336 · Published 2022-09-15 · No fix listed CWE-369
Priority LOW 25
Certain The MPlayer Project products are vulnerable to Buffer Overflow via the function mp_unescape03() of libmpdemux/mpeg_hdr.c.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00365 · Published 2022-09-15 · No fix listed CWE-787
Priority LOW 25
Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mp_getbits() of libmpdemux/mpeg_hdr.c which affects mencoder and mplayer.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00365 · Published 2022-09-15 · No fix listed CWE-787
Priority LOW 25
The MPlayer Project mplayer SVN-r38374-13.0.1 is vulnerable to memory corruption via function free_mp_image() of libmpcodecs/mp_image.c.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00336 · Published 2022-09-15 · No fix listed CWE-787
Priority LOW 25
Certain The MPlayer Project products are vulnerable to Divide By Zero via function demux_open_avi() of libmpdemux/demux_avi.c which affects mencoder.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00336 · Published 2022-09-15 · No fix listed CWE-369
Priority LOW 25
Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mov_build_index() of libmpdemux/demux_mov.c.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00365 · Published 2022-09-15 · No fix listed CWE-787
Priority LOW 25
Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mov_build_index() of libmpdemux/demux_mov.c.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00308 · Published 2022-09-15 · No fix listed CWE-787
Priority LOW 25
Certain The MPlayer Project products are vulnerable to Buffer Overflow via function gen_sh_video () of mplayer/libmpdemux/demux_mov.c.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00365 · Published 2022-09-15 · No fix listed CWE-787
Priority LOW 25
Certain The MPlayer Project products are vulnerable to Buffer Overflow via function asf_init_audio_stream() of libmpdemux/asfheader.c.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00308 · Published 2022-09-15 · No fix listed CWE-787
Priority LOW 25
Certain The MPlayer Project products are vulnerable to Out-of-bounds Read via function read_meta_record() of mplayer/libmpdemux/asfheader.c.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00336 · Published 2022-09-15 · No fix listed CWE-125
Priority LOW 25
The MPlayer Project mencoder SVN-r38374-13.0.1 is vulnerable to Divide By Zero via the function config () of llibmpcodecs/vf_scale.c.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00336 · Published 2022-09-15 · No fix listed CWE-369
Priority LOW 25
Mplayer SVN-r38374-13.0.1 is vulnerable to Memory Leak via vf.c and vf_vo.c.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00379 · Published 2022-09-15 · No fix listed CWE-401