Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2006-1502 Details

Description

Multiple integer overflows in MPlayer 1.0pre7try2 allow remote attackers to cause a denial of service and trigger heap-based buffer overflows via (1) a certain ASF file handled by asfheader.c that causes the asf_descrambling function to be passed a negative integer after the conversion from a char to an int or (2) an AVI file with a crafted wLongsPerEntry or nEntriesInUse value in the indx chunk, which is handled in aviheader.c.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044615.html	CVE
http://secunia.com/advisories/19418	CVE	Vendor Advisory
http://secunia.com/advisories/19565	CVE
http://secunia.com/advisories/19919	CVE
http://securityreason.com/securityalert/532	CVE
http://securityreason.com/securityalert/647	CVE
http://securitytracker.com/id?1015842	CVE
https://exchange.xforce.ibmcloud.com/vulnerabilities/25513	CVE
https://exchange.xforce.ibmcloud.com/vulnerabilities/25514	CVE
http://www.gentoo.org/security/en/glsa/glsa-200605-01.xml	CVE
http://www.mandriva.com/security/advisories?name=MDKSA-2006:068	CVE
http://www.osvdb.org/24246	CVE
http://www.osvdb.org/24247	CVE
http://www.securityfocus.com/archive/1/429251/100/0/threaded	CVE
http://www.securityfocus.com/bid/17295	CVE
http://www.vupen.com/english/advisories/2006/1156	CVE
http://www.xfocus.org/advisories/200603/11.html	CVE	Vendor Advisory
http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044615.html	[email protected]
http://secunia.com/advisories/19418	[email protected]	Vendor Advisory
http://secunia.com/advisories/19565	[email protected]
http://secunia.com/advisories/19919	[email protected]
http://securityreason.com/securityalert/532	[email protected]
http://securityreason.com/securityalert/647	[email protected]
http://securitytracker.com/id?1015842	[email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/25513	[email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/25514	[email protected]
http://www.gentoo.org/security/en/glsa/glsa-200605-01.xml	[email protected]
http://www.mandriva.com/security/advisories?name=MDKSA-2006:068	[email protected]
http://www.osvdb.org/24246	[email protected]
http://www.osvdb.org/24247	[email protected]
http://www.securityfocus.com/archive/1/429251/100/0/threaded	[email protected]
http://www.securityfocus.com/bid/17295	[email protected]
http://www.vupen.com/english/advisories/2006/1156	[email protected]
http://www.xfocus.org/advisories/200603/11.html	[email protected]	Vendor Advisory

see all 34 references

Weakness Enumeration

CWE-ID	CWE Name	Source
NVD-CWE-Other	Weakness Not in a Standard CWE Category	[email protected]

Affected Products

Product	Versions
mplayer mplayer	<= 1.0_pre7try2
CPE cpe:2.3:a:mplayer:mplayer:::::::: Remediation No remediation found in references.

Change History

7 change records found show changes

Date	Action	Recorded By
Jun 16, 2026	CVE Modified	[email protected]
Apr 16, 2026		[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Oct 18, 2018	CVE Modified	[email protected]
Jul 20, 2017	CVE Modified	[email protected]
Mar 30, 2006	Initial Analysis	[email protected]