PUBLIC MARKS from tadeufilippini with tag "movie player"

SMPlayer is a new multimedia player, it uses the award-winning MPlayer as engine, so it's able to play the most known video & audio formats without the need of external codecs. SMPlayer is available for Windows and Linux.

A stack overflow was found and reported by Stefan Cornelius of Secunia Research in the code used to handle cddb queries. Two other similar issues were found by Reimar Döffinger while fixing the issue. The vulnerability is identified with CVE-2007-2948 and SAID 24302. When copying the album title and category, no checking was performed on the size of the strings before storing them in a fixed-size array. A malicious entry in the database could trigger a stack overflow in the program, leading to arbitrary code execution with the uid of the user running MPlayer.

2007-05-13, Sunday :: MPlayer at LinuxTag 2007 posted by Roberto

Daily xine RPMS (Linux DVD player)