tocsin

Debian/mplayer: unknown

Stack-based buffer overflow in the demux_open_vqf function in libmpdemux/demux_vqf.c in MPlayer 1.0 rc2 before r28150 allows remote attackers to execute arbitrary code via a malformed TwinVQ file.

Action: Upgrade mplayer to 1.0~rc2-19 or later.

Affected

introducedfixedlast affected
01.0~rc2-19-

Fixed versions

1.0~rc2-19

Sources

published · modified · JSON