FreeBSD : mplayer -- cddb stack overflow (3ac80dd2-14df-11dc-bcfc-0016179b2dd5)

High Nessus Plugin ID 25451


The remote FreeBSD host is missing one or more security-related updates.


Mplayer Team reports :

A stack overflow was found in the code used to handle cddb queries.
When copying the album title and category, no checking was performed on the size of the strings before storing them in a fixed-size array.
A malicious entry in the database could trigger a stack overflow in the program, leading to arbitrary code execution with the uid of the user running MPlayer.


Update the affected packages.

See Also

Plugin Details

Severity: High

ID: 25451

File Name: freebsd_pkg_3ac80dd214df11dcbcfc0016179b2dd5.nasl

Version: $Revision: 1.20 $

Type: local

Published: 2007/06/07

Modified: 2013/06/21

Dependencies: 12634

Risk Information

Risk Factor: High


Base Score: 9.3

Temporal Score: 6.9

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

Vulnerability Information

CPE: p-cpe:/a:freebsd:freebsd:mplayer, p-cpe:/a:freebsd:freebsd:mplayer-esound, p-cpe:/a:freebsd:freebsd:mplayer-gtk, p-cpe:/a:freebsd:freebsd:mplayer-gtk-esound, p-cpe:/a:freebsd:freebsd:mplayer-gtk2, p-cpe:/a:freebsd:freebsd:mplayer-gtk2-esound, cpe:/o:freebsd:freebsd

Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info

Exploit Available: false

Exploit Ease: No known exploits are available

Patch Publication Date: 2007/06/07

Vulnerability Publication Date: 2007/06/06

Reference Information

CVE: CVE-2007-2948

BID: 24339