CVE-2008-4610: Medium severity dvd player vulnerability

Q: What is the severity of CVE-2008-4610?

CVE-2008-4610 is classified as a denial of service vulnerability that can crash the MPlayer application.

Q: How do I fix CVE-2008-4610?

To fix CVE-2008-4610, upgrade to a version of MPlayer that is later than 1.0_rc1 or apply any provided patches from the developers.

Q: Which versions of MPlayer are affected by CVE-2008-4610?

CVE-2008-4610 affects MPlayer versions 0.90, 0.90_rc, 0.91, 0.92, 0.92.1, and all versions up to and including 1.0_rc1.

Q: What types of files can exploit CVE-2008-4610?

CVE-2008-4610 can be exploited using malformed AAC and Ogg Media (OGM) files.

Q: Can CVE-2008-4610 lead to data manipulation or information disclosure?

CVE-2008-4610 primarily causes a denial of service, resulting in application crashes, and does not directly lead to data manipulation or information disclosure.

Published Oct 20, 2008

Updated

MPlayer allows remote attackers to cause a denial of service (application crash) via (1) a malformed AAC file, as demonstrated by lol-vlc.aac; or (2) a malformed Ogg Media (OGM) file, as demonstrated by lol-ffplay.ogm, different vectors than CVE-2007-6718.

Affected Software

20 affected components

MPlayer MPlayer=0.92

MPlayer MPlayer<=1.0_rc1

MPlayer MPlayer=1.0_pre2

MPlayer MPlayer=0.90

MPlayer MPlayer=1.0_pre1

MPlayer MPlayer=0.90_rc

MPlayer MPlayer=1.0_pre5try2

MPlayer MPlayer=0.92.1

MPlayer MPlayer=1.0_pre3

MPlayer MPlayer=1.0_pre7try2

MPlayer MPlayer=0.92_cvs

MPlayer MPlayer=1.0_pre5

MPlayer MPlayer=0.91

MPlayer MPlayer=1.0_pre5try1

MPlayer MPlayer=1.0_pre3try2

MPlayer MPlayer=1.0_pre7

MPlayer MPlayer=1.0_pre6

MPlayer MPlayer=0.90_pre

MPlayer MPlayer=0.90_rc4

MPlayer MPlayer=1.0_pre4

Event History

Oct 20, 2008

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-4610?

CVE-2008-4610 is classified as a denial of service vulnerability that can crash the MPlayer application.

How do I fix CVE-2008-4610?

To fix CVE-2008-4610, upgrade to a version of MPlayer that is later than 1.0_rc1 or apply any provided patches from the developers.

Which versions of MPlayer are affected by CVE-2008-4610?

CVE-2008-4610 affects MPlayer versions 0.90, 0.90_rc, 0.91, 0.92, 0.92.1, and all versions up to and including 1.0_rc1.

What types of files can exploit CVE-2008-4610?

CVE-2008-4610 can be exploited using malformed AAC and Ogg Media (OGM) files.

Can CVE-2008-4610 lead to data manipulation or information disclosure?