Array index vulnerability in libmpdemux/demux_audio.c in MPlayer 1.0rc2 and SVN before r25917, and possibly earlier versions, as used in Xine-lib 1.1.10, might allow remote attackers to execute arbitrary code via a crafted FLAC tag, which triggers a buffer overflow.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mplayer | Mplayer | 1.02rc2 (including) | 1.02rc2 (including) |
| Xine-lib | Xine | 1.1.10 (including) | 1.1.10 (including) |