CVE-2004-1311: Mplayer

High severity, CVSS 10.0. EPSS: 5.2% chance of exploitation in the next 30 days.

Integer overflow in the real_setup_and_get_header function in real.c for Unix MPlayer 1.0pre5 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a Real RTSP streaming media file with a -1 content-length field, which leads to a heap-based buffer overflow.

Affected products

• Mplayer Mplayer: version 1.0_pre5 only

Published 2005-01-10. Last modified 2026-06-16.