CVE-2007-2948
mplayer
EPSS 13.2%
Description
Multiple stack-based buffer overflows in stream/stream_cddb.c in MPlayer before 1.0rc1try3 allow remote attackers to execute arbitrary code via a CDDB entry with a long (1) album title or (2) category.
How to fix CVE-2007-2948
To remediate CVE-2007-2948, upgrade the affected package to a fixed version below.
- Debian/mplayer—upgrade to 1.0~rc1-14 or later
- Debian/mplayer—upgrade to 1.0~rc1-12etch1 or later
Is CVE-2007-2948 being exploited?
Moderate — EPSS is 13.2%. Track this CVE but it's not at the top of the prioritisation list.
Affected packages (2)
- from 0, < 1.0~rc1-14
- from 0, < 1.0~rc1-12etch1