PT-2022-7417
CVE-2022-38863
·
تاريخ النشر
2022-09-15
·
تاريخ التحديث
2024-07-30
الوصف من
CVSS 3.1
5.5
متوسطةالمقاييسAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
MPlayer versions SVN-r38374-13.0.1
mencoder versions SVN-r38374-13.0.1
Description
The issue is related to a Buffer Overflow via the
mp getbits() function of libmpdemux/mpeg hdr.c, which affects mencoder and mplayer. This can lead to a denial of service.Recommendations
For MPlayer version SVN-r38374-13.0.1, consider disabling the
mp getbits() function as a temporary workaround until a patch is available.
For mencoder version SVN-r38374-13.0.1, restrict access to the libmpdemux/mpeg hdr.c module to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾