diff options
| author | miwi <miwi@FreeBSD.org> | 2009-01-16 07:00:51 +0800 |
|---|---|---|
| committer | miwi <miwi@FreeBSD.org> | 2009-01-16 07:00:51 +0800 |
| commit | 9678adb638afa70e02e347a6e7f65d08f29fc8a2 (patch) | |
| tree | eab99697509ba1524c2f60521a8b59ecc03f963a /security | |
| parent | 798866cafc4208705d4a5edbbb4b5cafbd3c381b (diff) | |
| download | freebsd-ports-gnome-9678adb638afa70e02e347a6e7f65d08f29fc8a2.tar.gz freebsd-ports-gnome-9678adb638afa70e02e347a6e7f65d08f29fc8a2.tar.zst freebsd-ports-gnome-9678adb638afa70e02e347a6e7f65d08f29fc8a2.zip | |
- Document mplayer -- vulnerability in STR files processor
PR: based on 130573
Diffstat (limited to 'security')
| -rw-r--r-- | security/vuxml/vuln.xml | 36 |
1 files changed, 36 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 38245017ed8d..dc6668ca6f48 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -34,6 +34,42 @@ Note: Please add new entries to the beginning of this file. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="5ccb1c14-e357-11dd-a765-0030843d3802"> + <topic>mplayer -- vulnerability in STR files processor</topic> + <affects> + <package> + <name>mplayer</name> + <name>mplayer-esound</name> + <name>mplayer-gtk</name> + <name>mplayer-gtk-esound</name> + <name>mplayer-gtk2</name> + <name>mplayer-gtk2-esound</name> + <range><lt>0.99.11_10</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>secunia reports:</p> + <blockquote cite="http://secunia.com/advisories/30994"> + <p>The vulnerability is caused due to a boundary error within the + "str_read_packet()" function in libavformat/psxstr.c. This can be + exploited to cause a heap-based buffer overflow via a specially + crafted STR file.</p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2008-3162</cvename> + <bid>30157</bid> + <url>http://secunia.com/advisories/30994</url> + <url>https://roundup.mplayerhq.hu/roundup/ffmpeg/issue311</url> + </references> + <dates> + <discovery>2008-07-09</discovery> + <entry>2009-01-15</entry> + </dates> + </vuln> + <vuln vid="bc6a7e79-e111-11dd-afcd-00e0815b8da8"> <topic>cgiwrap -- XSS Vulnerability</topic> <affects> |