Sploitus

36 exploited vulnerabilities in Mplayer

Vulnerabilities with publicly known exploits

Vendors
FFmpeg, Mplayer, Mplayer Team, Pandoratv, Alt Linux, Unknown
With known exploits
36
Affected Ffmpeg versions
≤ 0.4.9, 0.3, 0.3.1, 0.3.2, 0.3.3, 0.3.4, 0.4.0, 0.4.2, 0.4.3, 0.4.4, 0.4.5, 0.4.6, 0.4.7, 0.4.8
Affected Mplayer versions
= 1.0_rc2, 0.90, 0.91, 0.92, 0.92.1, 1.0_pre1, 1.0_pre2, 1.0_pre3, 1.0_pre3try2, 1.0_pre4, 1.0_pre5, 1.0_pre5try1, 0.90_pre, 0.90_rc, 0.90_rc4, 0.92_cvs, head_cvs, 1.02rc2, 1.0_rc1, 1.0_pre5try2, 1.0_pre6, 1.0_pre7, 1.0_pre7try2
Affected mplayer2 versions
All versions
Affected Ricardo Villalba Smplayer versions
= 0.6.9
Affected Kde Kmplayer versions
≤ 2.9.4.1433, 2.9.3.1210
Affected Sgi Irix versions
All versions
Affected Xine Xine-lib versions
= 1.1.10
Affected Mplayerhq Mencoder versions
= svn-r38374-13.0.1

Vulnerabilities with exploits

Highest CVSS first — 13 of these already have exploit code on Sploitus

CVE-2008-4866
CVSS 10.0 HIGH 2008-10-31
CVE-2008-1558 2 exploits
CVSS 10.0 HIGH 2008-03-31
MPlayer sdpplin_parse()函数RTSP整数溢出漏洞MPlayer 1.0 rc2 - 'sdpplin_parse()' Array Indexing Buffer Overflow (PoC)
CVE-2004-1285
CVSS 10.0 HIGH 2004-12-22FIX AVAILABLE
CVE-2004-0659 1 exploit
CVSS 10.0 HIGH 2004-07-13
MPlayer 1.0pre4 GUI - Filename handling Overflow
CVE-2004-0386 1 exploit
CVSS 10.0 HIGH 2004-04-07
MPlayer 0.9/1.0 - Remote HTTP Header Buffer Overflow
CVE-2011-3625 1 exploit
CVSS 9.3 HIGH 2014-06-11FIX AVAILABLE
MPlayer - '.SAMI' Subtitle File Buffer Overflow (Metasploit)
CVE-2012-3841
CVSS 9.3 HIGH 2012-07-03
CVE-2009-2896 1 exploit
CVSS 9.3 HIGH 2009-08-20
KMplayer 2.9.4.1433 - '.srt' Local Buffer Overflow (PoC)
CVE-2008-0485 1 exploit
CVSS 9.3 HIGH 2008-02-05
MPlayer 1.0rc2 - 'demux_mov.c' Remote Code Execution
CVE-2023-1745
CVSS 7.8 HIGH 2023-03-30FIX AVAILABLE
CVE-2022-38862
CVSS 7.8 HIGH 2022-09-15FIX AVAILABLE
CVE-2019-17259
CVSS 7.8 HIGH 2019-10-08FIX AVAILABLE
CVE-2007-4938 1 exploit
CVSS 7.6 HIGH 2007-09-18FIX AVAILABLE
MPlayer 1.0 - AVIHeader.C Heap Buffer Overflow
CVE-2010-2062
CVSS 7.5 HIGH 2014-12-26FIX AVAILABLE
CVE-2008-0486 1 exploit
CVSS 7.5 HIGH 2008-02-05FIX AVAILABLE
MPlayer demux_audio.c远程栈溢出漏洞
CVE-2006-6172
CVSS 7.5 HIGH 2006-11-30
CVE-2003-0835 1 exploit
CVSS 7.5 HIGH 2003-10-01FIX AVAILABLE
MPlayer 0.9/1.0 - Streaming ASX Header Parsing Buffer Overrun
CVE-2007-4941 1 exploit
CVSS 7.1 HIGH 2007-09-18
KMPlayer 2.9.3.1214 - Multiple Remote Denial of Service Vulnerabilities
CVE-2009-1440
CVSS 6.8 MEDIUM 2009-04-27FIX AVAILABLE
CVE-2022-38860
CVSS 5.5 MEDIUM 2022-09-15
CVE-2022-38858
CVSS 5.5 MEDIUM 2022-09-15
CVE-2022-38856
CVSS 5.5 MEDIUM 2022-09-15
CVE-2022-32317
CVSS 5.5 MEDIUM 2022-07-14FIX AVAILABLE
CVE-2022-38855
CVSS 5.5 MEDIUM 2022-09-15
CVE-2022-38861
CVSS 5.5 MEDIUM 2022-09-15
CVE-2022-38850
CVSS 5.5 MEDIUM 2022-09-15
CVE-2022-38863
CVSS 5.5 MEDIUM 2022-09-15FIX AVAILABLE
CVE-2022-38864
CVSS 5.5 MEDIUM 2022-09-15
CVE-2022-38865
CVSS 5.5 MEDIUM 2022-09-15
CVE-2022-38600
CVSS 5.5 MEDIUM 2022-09-15FIX AVAILABLE
CVE-2022-38851
CVSS 5.5 MEDIUM 2022-09-15FIX AVAILABLE
CVE-2022-38853
CVSS 5.5 MEDIUM 2022-09-15FIX AVAILABLE
CVE-2019-19489
CVSS 5.5 MEDIUM 2019-12-02FIX AVAILABLE
CVE-2017-16952 3 exploits
CVSS 5.5 MEDIUM 2017-11-28FIX AVAILABLE
KMPlayer 4.2.2.4 - Denial of Service ExploitKMPlayer 4.2.2.4 - Denial of Service
CVE-2008-4610 2 exploits
CVSS 5.0 MEDIUM 2008-10-20
MPlayer - '.AAC' File Handling Denial of ServiceMPlayer - '.OGM' File Handling Denial of Service
CVE-2012-6044 1 exploit
CVSS 4.3 MEDIUM 2012-11-26
M-Player 0.4 - Local Denial of Service