← Database

CVE-2008-0486

HIGH CVSS: 7.5 Published: 2008-02-05 Modified: 2026-06-16

Description

Array index vulnerability in libmpdemux/demux_audio.c in MPlayer 1.0rc2 and SVN before r25917, and possibly earlier versions, as used in Xine-lib 1.1.10, might allow remote attackers to execute arbitrary code via a crafted FLAC tag, which triggers a buffer overflow.

Affected Platforms

Xine Xine-LibMplayer Mplayer

Weakness Type

CWE-189

References