CVE-2008-3827: Mplayer

High severity, CVSS 9.3. EPSS: 10.9% chance of exploitation in the next 30 days.

Multiple integer underflows in the Real demuxer (demux_real.c) in MPlayer 1.0_rc2 and earlier allow remote attackers to cause a denial of service (process termination) and possibly execute arbitrary code via a crafted video file that causes the stream_read function to read or write arbitrary memory.

Affected products

• Mplayer Mplayer: up to and including 1.0_rc2; version 0.90 only; version 0.90_pre only; version 0.90_rc only; version 0.90_rc4 only; version 0.91 only; …

Published 2008-09-29. Last modified 2026-06-16.