S-275: MPlayer Vulnerability


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) S-275: MPlayer Vulnerability
# 1  
Old 04-25-2008
S-275: MPlayer Vulnerability

It was discovered that the MPlayer movie player performs insufficient input sanitising on SDP session data, elading to potential execution of arbitrary code through a malformed multimedia stream. The risk is MEDIUM. Could lead to potential execution of arbitrary code through a malformed multimedia stream.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread

8 More Discussions You Might Find Interesting

1. UNIX for Beginners Questions & Answers

Mplayer fifo.

Hi all, First of all, sorry for the pastebin link. The code tags aren't working for me. #!/bin/bash # while-menu-dialog: a menu driven - Pastebin.com This is a channel "changer" shell script i'm working on. It uses dialog to display the menus. It... (3 Replies)
Discussion started by: ignatius
3 Replies

2. Shell Programming and Scripting

mplayer problem

I have this problem using a script that uses mplayer. This is the error messages. INFO: Mplayer Log LOG: MPlayer SVN-r1.0~rc3+svn20090426-4.4.3 (C) 2000-2009 MPlayer Team LOG: mplayer: could not connect to socket LOG: mplayer: No such file or directory LOG: Failed to open LIRC support. You... (1 Reply)
Discussion started by: locoroco
1 Replies

3. UNIX for Dummies Questions & Answers

mplayer snapshots

I have a script with: mplayer tv:// -tv driver=v4l2:device=/dev/video0:width=320:height=240:norm=NTSC:fps=30:noaudio:input=0 -vf screenshot -aspect 4:3 -vo xv to take .png screenshots. It now works but am not getting what the webcam sees displayed in the frame -- just snow noise. Does someone... (1 Reply)
Discussion started by: slak0
1 Replies

4. AIX

USB on IntelliStation 275

Is it possible to use USB with an IntelliStation 275? It has a P4 CPU and AIX OpenBeta. I would like to connect an external hard drive as backup. (3 Replies)
Discussion started by: rein
3 Replies

5. Solaris

mplayer on soalris

Hi all ... I would like to know how to install mplayer on solaris 10 i have been trying to understand it through the docs on their website but didnt get it that well.. So if anyone can give me step by step instructions to install it ..i would much appreciate it!!! Thanks (3 Replies)
Discussion started by: wrapster
3 Replies

6. UNIX for Dummies Questions & Answers

Problem with mplayer

Can someone help with following problem? I'm trying to watch the stream video. mplayer SRTV - Main Air MPlayer SVN-r24130 (C) 2000-2007 MPlayer Team CPU: AMD Sempron(tm) Processor 2800+ (Family: 15, Model: 44, Stepping: 2) CPUflags: MMX: 1 MMX2: 1 3DNow: 1 3DNow2: 1 SSE: 1 SSE2: 1... (1 Reply)
Discussion started by: mirusnet
1 Replies

7. Linux

Help cannot install mplayer

whenever i trty to install mplayer or for that matter any video player i have 2 types of error 1.error while loading shared libraries: libaa.so.1: cannot open shared object file: No such file or directory 2.error while loading shared libraries: libmp3lame.so.0: cannot open shared object file: No... (1 Reply)
Discussion started by: wojtyla
1 Replies

8. UNIX for Dummies Questions & Answers

Help me: Divx with MPlayer

Hi, I'm a beginner in linux :( I wanna play divx with MPlayer. I have mdk8.1 and I can't install MPlayer because I have gcc 2.96 I need upgrade my gcc to 2.95.2 or 2.95.4 Anyone can say me how do i do to uninstall gcc-2.96 and install gcc-2.95.2. Can you give me the exactly url to... (1 Reply)
Discussion started by: mercutio
1 Replies
Login or Register to Ask a Question
aviplay(1)																aviplay(1)

NAME
aviplay - QT-based movie player SYNOPSIS
aviplay [options] [ files | URLs ] DESCRIPTION
aviplay is a QT-based player for various avi, asf, mpeg4 movie files. Avifile project creates library that allows programs to read and write compressed AVI/ASF files (Indeo Video, DivX :-), etc.) under Unix OS. (De)compression is performed with various plugins (included Win32 DLLs for x86_32 OS) if native codec is not available. Win32 libraries have to be downloaded separately. Primarily the ffmpeg project is used for codecs and also for stream parsing. Over the time it's possible the project will mostly blend into ffmpeg. FEATURES
* low CPU usage (movies playable even P200MMX) * smooth video (using threads and frame precaching) * supports streamed .asf files * audio resampling suppport * modular design OPTIONS
-h --help Show help message -c --codec [help] Set codec options (use help to see options for this parameter) -s --size <width:height> Start playing movie at dimensions X * Y. -f --fullscreen Start playing movie in fullscreen. -f --maximize Start playing movie in maximized mode (i.e. preserve current resolution). --seek <position> Seek to given position in movie. -sub --subtitle <filename> Use give file as the source for subtitles. -subcp --subtitle_codepage <codepage> Select codepage for subtitles. They are internaly encoded into UTF-8. See iconv(3) for available codepages. Codepage "default" means current default encoding in system. Example of codepages: CP1250, ISO8859-2, default. -subfont --subtitle_font <fontname> Select font for subtitles. At this moment only X11 fonts are supported (either in traditional "-misc-*" or TTF notation) -ac --audio-codec <codecname> Prefered codec to be used for movie audio decoding. Use with "help" to see available audio codecs. -vc --video-codec <codecname> Prefered codec to be used for movie video decoding. Use with "help" to see available video codecs. --rc Enables remote control (stdin|stdout). SHELL variables: WIN32_PATH - can be used to override library path /usr/lib/win32 which holds MS Windows binary dll codecs. AVIPLUGIN_PATH - can be used to override library path /usr/lib/avifile which holds avifile plugins. AVIPLAY_MUTE_AUDIO - if set shows just video track AVIPLAY_MUTE_VIDEO - if set plays just audio track AVIPLAY_NOSYNC - do not synchronize audio and video track HTTP_PROXY WRITE_ASF - write asf file received over the network to file (/tmp/*.asf) NOTE
Press the About button in aviplay's GUI for more details about the usage and configuation. Aviplay automaticaly searches for subtitle file with the same name as the original ".avi" file but with .sub, .SUB, .srt, .SRT, .txt, .TXT, .smi, .SMI suffix. For Debian users: After the discussion with the autor I have came to the conclusion that GSM codec is legaly distributed under GPL terms since this piece of code was donated to the project by the original author which was using it in the non-GPL project xanim. SEE ALSO
http://avifile.sourceforge.net for the original source and main CVS archive for binary codecs. http://mplayerhq.hu for mplayer - an excelent player with more options and supported formats AUTHORS
Original author: Eugene Kuznetsov <divx@euro.ru> Current developer: Zdenek Kabelac <kabi@users.sourceforge.net> Zdenek Kabelac 12 February 2003 aviplay(1)