CVE-2008-3827

Multiple integer underflows in the Real demuxer (demux_real.c) in MPlayer 1.0_rc2 and earlier allow remote attackers to cause a denial of service (process termination) and possibly execute arbitrary code via a crafted video file that causes the stream_read function to read or write arbitrary memory.

Date published : 2008-09-29

http://www.securityfocus.com/bid/31473

http://www.securityfocus.com/archive/1/496806/100/0/threaded