CVE-2008-0485: Mplayer

High severity, CVSS 9.3. EPSS: 8.9% chance of exploitation in the next 30 days.

Array index error in libmpdemux/demux_mov.c in MPlayer 1.0 rc2 and earlier might allow remote attackers to execute arbitrary code via a QuickTime MOV file with a crafted stsc atom tag.

Affected products

• Mplayer Mplayer: up to and including 1.02rc2

Published 2008-02-05. Last modified 2026-06-16.