Unrated severityNVD Advisory· Published Feb 6, 2008· Updated Apr 23, 2026

CVE-2008-0630

Description

Buffer overflow in url.c in MPlayer 1.0rc2 and SVN before r25823 allows remote attackers to execute arbitrary code via a crafted URL that prevents the IPv6 parsing code from setting a pointer to NULL, which causes the buffer to be reused by the unescape code.

Affected products

MPlayer/Mplayer
cpe:2.3:a:mplayer:mplayer:1.02rc2:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

secunia.com/advisories/28955nvd
secunia.com/advisories/28956nvd
secunia.com/advisories/29307nvd
security.gentoo.org/glsa/glsa-200803-16.xmlnvd
www.debian.org/security/2008/dsa-1496nvd
www.mandriva.com/security/advisoriesnvd
www.mplayerhq.hu/design7/news.htmlnvd
www.securityfocus.com/bid/27766nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.006
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000