FreeBSD : mplayer -- cddb stack overflow (3ac80dd2-14df-11dc-bcfc-0016179b2dd5)

high Nessus Plugin ID 25451

Synopsis

The remote FreeBSD host is missing one or more security-related updates.

Description

Mplayer Team reports :

A stack overflow was found in the code used to handle cddb queries.
When copying the album title and category, no checking was performed on the size of the strings before storing them in a fixed-size array.
A malicious entry in the database could trigger a stack overflow in the program, leading to arbitrary code execution with the uid of the user running MPlayer.

Solution

Update the affected packages.

Plugin Details

Severity: High

ID: 25451

File Name: freebsd_pkg_3ac80dd214df11dcbcfc0016179b2dd5.nasl

Version: 1.23

Type: local

Family: FreeBSD Local Security Checks

Published: 6/7/2007

Updated: 1/6/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: High

Base Score: 9.3

Temporal Score: 6.9

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: p-cpe:/a:freebsd:freebsd:mplayer, p-cpe:/a:freebsd:freebsd:mplayer-esound, p-cpe:/a:freebsd:freebsd:mplayer-gtk, p-cpe:/a:freebsd:freebsd:mplayer-gtk2, p-cpe:/a:freebsd:freebsd:mplayer-gtk-esound, p-cpe:/a:freebsd:freebsd:mplayer-gtk2-esound, cpe:/o:freebsd:freebsd

Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info

Exploit Ease: No known exploits are available

Patch Publication Date: 6/7/2007

Vulnerability Publication Date: 6/6/2007

Reference Information

CVE: CVE-2007-2948

BID: 24339

Detections

Analytics