diff options
| author | Simon L. B. Nielsen <simon@FreeBSD.org> | 2007-06-07 18:34:14 +0000 |
|---|---|---|
| committer | Simon L. B. Nielsen <simon@FreeBSD.org> | 2007-06-07 18:34:14 +0000 |
| commit | c40c31c7cb195151430f3008fba65a5ec5c348ec (patch) | |
| tree | 51bab730cc4f5b832af1bc613cf299bfac0c9c28 /security/vuxml/vuln.xml | |
| parent | 9b6468c61bb8effde5752468241b041e791b352b (diff) | |
| download | ports-c40c31c7cb195151430f3008fba65a5ec5c348ec.tar.gz ports-c40c31c7cb195151430f3008fba65a5ec5c348ec.zip | |
Notes
Diffstat (limited to 'security/vuxml/vuln.xml')
| -rw-r--r-- | security/vuxml/vuln.xml | 20 |
1 files changed, 13 insertions, 7 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 1e5cea101ec5..4fa368ce2e2e 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -39,19 +39,25 @@ Note: Please add new entries to the beginning of this file. <affects> <package> <name>mplayer</name> - <range><lt>0.99.10_9</lt></range> + <name>mplayer-esound</name> + <name>mplayer-gtk</name> + <name>mplayer-gtk2</name> + <name>mplayer-gtk-esound</name> + <name>mplayer-gtk2-esound</name> + <range><lt>0.99.10_10</lt></range> </package> </affects> <description> <body xmlns="http://www.w3.org/1999/xhtml"> <p>Mplayer Team reports:</p> <blockquote cite="http://www.mplayerhq.hu/design7/news.html"> - <p>A stack overflow was found in the code used to handle cddb queries. - When copying the album title and category, no checking was performed - on the size of the strings before storing them in a fixed-size array. - A malicious entry in the database could trigger a stack overflow in - the program, leading to arbitrary code execution with the uid of the - user running MPlayer.</p> + <p>A stack overflow was found in the code used to handle + cddb queries. When copying the album title and category, + no checking was performed on the size of the strings + before storing them in a fixed-size array. A malicious + entry in the database could trigger a stack overflow in + the program, leading to arbitrary code execution with the + uid of the user running MPlayer.</p> </blockquote> </body> </description> |