CVE-2003-0835: Mplayer

High severity, CVSS 7.5. EPSS: 5% chance of exploitation in the next 30 days.

Multiple buffer overflows in asf_http_request of MPlayer before 0.92 allows remote attackers to execute arbitrary code via an ASX header with a long hostname.

Affected products

• Mplayer Mplayer: version 0.90 only; version 0.90_pre only; version 0.90_rc only; version 0.90_rc4 only; version 0.91 only; version 1.0_pre1 only

Published 2003-11-17. Last modified 2026-06-16.