MPlayer allows remote attackers to cause a denial of service (application crash) via (1) a malformed AAC file, as demonstrated by lol-vlc.aac; or (2) a malformed Ogg Media (OGM) file, as demonstrated by lol-ffplay.ogm, different vectors than CVE-2007-6718.

The remote host is affected by the vulnerability described in GLSA-201310-13 (MPlayer: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in MPlayer and the bundled       FFmpeg. Please review the CVE identifiers and FFmpeg GLSA referenced       below for details.
  Impact :

    A remote attacker could entice a user to open a crafted media file to       execute arbitrary code or cause a Denial of Service.
  Workaround :

    There is no known workaround at this time.

A vulnerability was discovered and corrected in ffmpeg :

MPlayer allows remote attackers to cause a denial of service (application crash) via (1) a malformed AAC file, as demonstrated by lol-vlc.aac; or (2) a malformed Ogg Media (OGM) file, as demonstrated by lol-ffplay.ogm, different vectors than CVE-2007-6718 (CVE-2008-4610).

Packages for 2008.0 are provided for Corporate Desktop 2008.0 customers

This update provides a solution to this vulnerability.

It was discovered that FFmpeg did not correctly handle certain malformed Ogg Media (OGM) files. If a user were tricked into opening a crafted Ogg Media file, an attacker could cause the application using FFmpeg to crash, leading to a denial of service. (CVE-2008-4610)

It was discovered that FFmpeg did not correctly handle certain parameters when creating DTS streams. If a user were tricked into processing certain commands, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. This issue only affected Ubuntu 8.10. (CVE-2008-4866)

It was discovered that FFmpeg did not correctly handle certain malformed DTS Coherent Acoustics (DCA) files. If a user were tricked into opening a crafted DCA file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. (CVE-2008-4867)

It was discovered that FFmpeg did not correctly handle certain malformed 4X movie (4xm) files. If a user were tricked into opening a crafted 4xm file, an attacker could execute arbitrary code with the privileges of the user invoking the program. (CVE-2009-0385).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
70648	GLSA-201310-13 : MPlayer: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
43362	Mandriva Linux Security Advisory : ffmpeg (MDVSA-2009:335)	Nessus	Mandriva Local Security Checks	medium
38037	Ubuntu 7.10 / 8.04 LTS / 8.10 : ffmpeg, ffmpeg-debian vulnerabilities (USN-734-1)	Nessus	Ubuntu Local Security Checks	critical

Detections

Analytics

CVE-2008-4610

medium

Tenable Plugins

high

medium

critical