CVE-2008-0630: Mplayer

Medium severity, CVSS 6.8. EPSS: 3.9% chance of exploitation in the next 30 days.

Buffer overflow in url.c in MPlayer 1.0rc2 and SVN before r25823 allows remote attackers to execute arbitrary code via a crafted URL that prevents the IPv6 parsing code from setting a pointer to NULL, which causes the buffer to be reused by the unescape code.

Affected products

• Mplayer Mplayer: version 1.02rc2 only

Published 2008-02-06. Last modified 2026-06-16.