Array index vulnerability in libmpdemux/demux_audio.c in MPlayer 1.0rc2 and SVN before r25917, and possibly earlier versions, as used in Xine-lib 1.1.10, might allow remote attackers to execute arbitrary code via a crafted FLAC tag, which triggers a buffer overflow.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mplayer | Mplayer | 1.02rc2 (including) | 1.02rc2 (including) |
| Xine-lib | Xine | 1.1.10 (including) | 1.1.10 (including) |
| Mplayer | Ubuntu | devel | * |
| Mplayer | Ubuntu | edgy | * |
| Mplayer | Ubuntu | feisty | * |
| Mplayer | Ubuntu | gutsy | * |
| Mplayer | Ubuntu | hardy | * |
| Mplayer | Ubuntu | upstream | * |
| Xine-lib | Ubuntu | edgy | * |
| Xine-lib | Ubuntu | feisty | * |
| Xine-lib | Ubuntu | gutsy | * |
| Xine-lib | Ubuntu | upstream | * |