S-275: MPlayer Vulnerability


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) S-275: MPlayer Vulnerability
# 1  
Old 04-25-2008
S-275: MPlayer Vulnerability

It was discovered that the MPlayer movie player performs insufficient input sanitising on SDP session data, elading to potential execution of arbitrary code through a malformed multimedia stream. The risk is MEDIUM. Could lead to potential execution of arbitrary code through a malformed multimedia stream.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread

8 More Discussions You Might Find Interesting

1. UNIX for Beginners Questions & Answers

Mplayer fifo.

Hi all, First of all, sorry for the pastebin link. The code tags aren't working for me. #!/bin/bash # while-menu-dialog: a menu driven - Pastebin.com This is a channel "changer" shell script i'm working on. It uses dialog to display the menus. It... (3 Replies)
Discussion started by: ignatius
3 Replies

2. Shell Programming and Scripting

mplayer problem

I have this problem using a script that uses mplayer. This is the error messages. INFO: Mplayer Log LOG: MPlayer SVN-r1.0~rc3+svn20090426-4.4.3 (C) 2000-2009 MPlayer Team LOG: mplayer: could not connect to socket LOG: mplayer: No such file or directory LOG: Failed to open LIRC support. You... (1 Reply)
Discussion started by: locoroco
1 Replies

3. UNIX for Dummies Questions & Answers

mplayer snapshots

I have a script with: mplayer tv:// -tv driver=v4l2:device=/dev/video0:width=320:height=240:norm=NTSC:fps=30:noaudio:input=0 -vf screenshot -aspect 4:3 -vo xv to take .png screenshots. It now works but am not getting what the webcam sees displayed in the frame -- just snow noise. Does someone... (1 Reply)
Discussion started by: slak0
1 Replies

4. AIX

USB on IntelliStation 275

Is it possible to use USB with an IntelliStation 275? It has a P4 CPU and AIX OpenBeta. I would like to connect an external hard drive as backup. (3 Replies)
Discussion started by: rein
3 Replies

5. Solaris

mplayer on soalris

Hi all ... I would like to know how to install mplayer on solaris 10 i have been trying to understand it through the docs on their website but didnt get it that well.. So if anyone can give me step by step instructions to install it ..i would much appreciate it!!! Thanks (3 Replies)
Discussion started by: wrapster
3 Replies

6. UNIX for Dummies Questions & Answers

Problem with mplayer

Can someone help with following problem? I'm trying to watch the stream video. mplayer SRTV - Main Air MPlayer SVN-r24130 (C) 2000-2007 MPlayer Team CPU: AMD Sempron(tm) Processor 2800+ (Family: 15, Model: 44, Stepping: 2) CPUflags: MMX: 1 MMX2: 1 3DNow: 1 3DNow2: 1 SSE: 1 SSE2: 1... (1 Reply)
Discussion started by: mirusnet
1 Replies

7. Linux

Help cannot install mplayer

whenever i trty to install mplayer or for that matter any video player i have 2 types of error 1.error while loading shared libraries: libaa.so.1: cannot open shared object file: No such file or directory 2.error while loading shared libraries: libmp3lame.so.0: cannot open shared object file: No... (1 Reply)
Discussion started by: wojtyla
1 Replies

8. UNIX for Dummies Questions & Answers

Help me: Divx with MPlayer

Hi, I'm a beginner in linux :( I wanna play divx with MPlayer. I have mdk8.1 and I can't install MPlayer because I have gcc 2.96 I need upgrade my gcc to 2.95.2 or 2.95.4 Anyone can say me how do i do to uninstall gcc-2.96 and install gcc-2.95.2. Can you give me the exactly url to... (1 Reply)
Discussion started by: mercutio
1 Replies
Login or Register to Ask a Question
libcommputil(3LIB)						Interface Libraries						libcommputil(3LIB)

NAME
libcommputil - communication protocol parser utilities library SYNOPSIS
cc [ flag... ] file... -lcommputil [ library... ] #include <sdp.h> DESCRIPTION
The communication protocol parser utilities library is a placeholder for public interfaces that facilitate parsing of various communication protocols. Functions in this library parse the SDP (Session Description Protocol) description, check for syntax conformance, and generate SDP descriptions. SDP (Session Description Protocol), described in RFC 4566, describes multimedia sessions for the purposes of session announcement, session invitation, and other forms of multimedia session initiation. SDP is used to convey session information in Session Initiation Protocol (SIP), Streaming Media (Real Time Streaming Protocol, RTSP), email, and World Wide Web and Multicast Session Announcement. INTERFACES
The shared object libcommputil.so.1 provides the public interfaces defined below. See Intro(3) for additional information on shared object interfaces. sdp_add_attribute sdp_add_bandwidth sdp_add_connection sdp_add_email sdp_add_information sdp_add_key sdp_add_media sdp_add_name sdp_add_origin sdp_add_phone sdp_add_repeat sdp_add_time sdp_add_uri sdp_add_zone sdp_clone_session sdp_delete_attribute sdp_delete_field sdp_delete_media sdp_delete_media_field sdp_find_attribute sdp_find_media sdp_find_media_rtpmap sdp_free_session sdp_new_session sdp_parse sdp_session_to_str FILES
/lib/libcommputil.so.1 shared object. /lib/64/libcommputil.so.1 64-bit shared object. ATTRIBUTES
See attributes(5) for description of the following attributes: +-----------------------------+-----------------------------+ | ATTRIBUTE TYPE | ATTRIBUTE VALUE | +-----------------------------+-----------------------------+ |Availability |SUNWcsl (32-bit) | +-----------------------------+-----------------------------+ | |SUNWcslx (64-bit) | +-----------------------------+-----------------------------+ |Interface Stability |Committed | +-----------------------------+-----------------------------+ |MT-Level |Safe | +-----------------------------+-----------------------------+ SEE ALSO
Intro(3), attributes(5) SunOS 5.11 12 Oct 2007 libcommputil(3LIB)