MDKSA-2006:068
- Package name
- mplayer
- Date
- 2006-04-07
- Advisory ID
- MDKSA-2006:068
- Affected versions
- CS3.0 i586 , 2006.0 i586 , 2006.0 x86_64 , CS3.0 x86_64
Problem description
Multiple integer overflows in MPlayer 1.0pre7try2 allow remote
attackers to cause a denial of service and trigger heap-based buffer
overflows via (1) a certain ASF file handled by asfheader.c that causes
the asf_descrambling function to be passed a negative integer after the
conversion from a char to an int or (2) an AVI file with a crafted
wLongsPerEntry or nEntriesInUse value in the indx chunk, which is
handled in aviheader.c.
The updated packages have been patched to prevent this problem.
Updated packages
CS3.0 i586
e96a39ec87ce97b97a3ccc10b7ea80cc corporate/3.0/RPMS/libdha0.1-1.0-0.pre3.14.7.C30mdk.i586.rpm 6466d0a2b2a01ddf3bb4d25f477e8fb6 corporate/3.0/RPMS/libpostproc0-1.0-0.pre3.14.7.C30mdk.i586.rpm ac89e6c99a5f83217bf0633661d035e1 corporate/3.0/RPMS/libpostproc0-devel-1.0-0.pre3.14.7.C30mdk.i586.rpm 301733fd13558987b64c3404cbe992d6 corporate/3.0/RPMS/mencoder-1.0-0.pre3.14.7.C30mdk.i586.rpm ff5e64d0353c5047711b71a472816b20 corporate/3.0/RPMS/mplayer-1.0-0.pre3.14.7.C30mdk.i586.rpm 92337dd6b2c24822e0473a9f89680163 corporate/3.0/RPMS/mplayer-gui-1.0-0.pre3.14.7.C30mdk.i586.rpm 70e6a51230bf28e9215b0036f3290d55 corporate/3.0/SRPMS/mplayer-1.0-0.pre3.14.7.C30mdk.src.rpm
2006.0 i586
03c437640874758ea658eff341005320 2006.0/RPMS/libdha1.0-1.0-1.pre7.12.3.20060mdk.i586.rpm a2b8e4aabaafd0c884eb659f6cd0feaf 2006.0/RPMS/libpostproc0-1.0-1.pre7.12.3.20060mdk.i586.rpm d1676891039ac155896170842f97ed40 2006.0/RPMS/libpostproc0-devel-1.0-1.pre7.12.3.20060mdk.i586.rpm 28fca9318c85691868955113a8c7808b 2006.0/RPMS/mencoder-1.0-1.pre7.12.3.20060mdk.i586.rpm 7c16c92c8ed358e216dacab0b018278b 2006.0/RPMS/mplayer-1.0-1.pre7.12.3.20060mdk.i586.rpm 5a3ff20ed2086148e600d0f1a88e1ef2 2006.0/RPMS/mplayer-gui-1.0-1.pre7.12.3.20060mdk.i586.rpm b427ac400ce812c26d4a72b9fb0dd20c 2006.0/SRPMS/mplayer-1.0-1.pre7.12.3.20060mdk.src.rpm
2006.0 x86_64
e0e4cfa862c584978ed8ac02f2be19a0 x86_64/2006.0/RPMS/lib64postproc0-1.0-1.pre7.12.3.20060mdk.x86_64.rpm a12a7da30ba364ded2558b17ce961ca9 x86_64/2006.0/RPMS/lib64postproc0-devel-1.0-1.pre7.12.3.20060mdk.x86_64.rpm a0716acb06f3473646a6077f8fb0684c x86_64/2006.0/RPMS/mencoder-1.0-1.pre7.12.3.20060mdk.x86_64.rpm 2e1e0b7cd6ce8c13f80d4de208550268 x86_64/2006.0/RPMS/mplayer-1.0-1.pre7.12.3.20060mdk.x86_64.rpm 74e8472e651326cf569f912c76548a80 x86_64/2006.0/RPMS/mplayer-gui-1.0-1.pre7.12.3.20060mdk.x86_64.rpm b427ac400ce812c26d4a72b9fb0dd20c x86_64/2006.0/SRPMS/mplayer-1.0-1.pre7.12.3.20060mdk.src.rpm
CS3.0 x86_64
7d84b489e9df376ef008a309f0da66c7 x86_64/corporate/3.0/RPMS/lib64postproc0-1.0-0.pre3.14.7.C30mdk.x86_64.rpm f9003ffa5f6b32b6d677208d71bebf11 x86_64/corporate/3.0/RPMS/lib64postproc0-devel-1.0-0.pre3.14.7.C30mdk.x86_64.rpm 5363a56acd413b4e93f22897eaf38c2b x86_64/corporate/3.0/RPMS/mencoder-1.0-0.pre3.14.7.C30mdk.x86_64.rpm 1c493d2eddd5cc94b1d32cdc52f16ca1 x86_64/corporate/3.0/RPMS/mplayer-1.0-0.pre3.14.7.C30mdk.x86_64.rpm b58a53a83e69fc98a739c447272c2174 x86_64/corporate/3.0/RPMS/mplayer-gui-1.0-0.pre3.14.7.C30mdk.x86_64.rpm 70e6a51230bf28e9215b0036f3290d55 x86_64/corporate/3.0/SRPMS/mplayer-1.0-0.pre3.14.7.C30mdk.src.rpm