CVE-2008-1558: Mplayer

High severity, CVSS 10.0. EPSS: 16.8% chance of exploitation in the next 30 days.

Uncontrolled array index in the sdpplin_parse function in stream/realrtsp/sdpplin.c in MPlayer 1.0 rc2 allows remote attackers to overwrite memory and execute arbitrary code via a large streamid SDP parameter. NOTE: this issue has been referred to as an integer overflow.

Affected products

• Mplayer Mplayer: version 1.0_rc2 only

Published 2008-03-31. Last modified 2026-06-16.