CVE-2004-1309: Mplayer Unix Mplayer

High severity, CVSS 10.0. EPSS: 5.2% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the demux_open_bmp function in demux_bmp.c for Unix MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a bitmap (BMP) file containing a large biClrUsed field.

Affected products

• Mplayer Unix Mplayer: version 1.0_pre5 only

Published 2005-01-10. Last modified 2026-06-16.