CVE Vulnerabilities

CVE-2006-6172

Published: Nov 30, 2006 | Modified: Mar 08, 2011
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

Buffer overflow in the asmrp_eval function in the RealMedia RTSP stream handler (asmrp.c) for Real Media input plugin, as used in (1) xine/xine-lib, (2) MPlayer 1.0rc1 and earlier, and possibly others, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a rulebook with a large number of rulematches.

Affected Software

Name Vendor Start Version End Version
Mplayer Mplayer * 1.0_rc1 (including)
Real_media_input_plugin Xine * *
Mplayer Ubuntu dapper *
Mplayer Ubuntu edgy *
Mplayer Ubuntu upstream *
Xine-lib Ubuntu dapper *
Xine-lib Ubuntu edgy *
Xine-lib Ubuntu upstream *

References