CVE-2004-1285: Mplayer

High severity, CVSS 10.0. EPSS: 5% chance of exploitation in the next 30 days.

Buffer overflow in the get_header function in asf_mmst_streaming.c for MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a crafted ASF video stream.

Affected products

• Mplayer Mplayer: version 0.90 only; version 0.91 only; version 0.92 only; version 0.92.1 only; version 1.0_pre1 only; version 1.0_pre2 only; …

Published 2005-01-10. Last modified 2026-06-16.