CVE-2007-2948: Mplayer

High severity, CVSS 9.3. EPSS: 5.7% chance of exploitation in the next 30 days.

Multiple stack-based buffer overflows in stream/stream_cddb.c in MPlayer before 1.0rc1try3 allow remote attackers to execute arbitrary code via a CDDB entry with a long (1) album title or (2) category.

Affected products

• Mplayer Mplayer: version 1.0_rc1 only

Published 2007-06-07. Last modified 2026-06-16.