CVE-2006-6172: Mplayer

High severity, CVSS 7.5. EPSS: 5.5% chance of exploitation in the next 30 days.

Buffer overflow in the asmrp_eval function in the RealMedia RTSP stream handler (asmrp.c) for Real Media input plugin, as used in (1) xine/xine-lib, (2) MPlayer 1.0rc1 and earlier, and possibly others, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a rulebook with a large number of rulematches.

Affected products

• Mplayer Mplayer: up to and including 1.0_rc1
• Xine Real Media Input Plugin: any version

Published 2006-11-30. Last modified 2026-06-16.