PUBLIC MARKS from tadeufilippini with tags "Linux Video" & mplayer

Download Source Code mplayerplug-in-3.45.tar.gz Daily Source Code mplayerplug-in-daily.tar.gz Binary Releases:(some may not be immediately available) Fedora Core 6 Binary RPMs: mplayerplug-in-3.45-fc6.i386.rpm mplayerplug-in Mozilla Extension: This Extension converts OBJECT tags to EMBED tags for sites that only support IE. mplayerplug-in-0.4.xpi For earlier versions and source RPMs follow this link

Watch Movie Trailers in your Unix Browser! What is it? mplayerplug-in is a browser plugin that uses mplayer to play digital media from websites. This plug-in gives Mozilla the ability to play media from a website the net without reading the source html and getting the url manually. Media is played embedded in the page or in a separate window depending on how the author of the webpage intended the media to be seen.

A stack overflow was found and reported by Stefan Cornelius of Secunia Research in the code used to handle cddb queries. Two other similar issues were found by Reimar Döffinger while fixing the issue. The vulnerability is identified with CVE-2007-2948 and SAID 24302. When copying the album title and category, no checking was performed on the size of the strings before storing them in a fixed-size array. A malicious entry in the database could trigger a stack overflow in the program, leading to arbitrary code execution with the uid of the user running MPlayer.