[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fZgkz38K3yUvMnl5LqHzLQC3NkPOYQMPcqJ3Xh5GqkJ4":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":26,"kevVulnerabilities":86,"topProductsByCves":87,"seoMetadata":90,"meta":99},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":25},20536,"mplayer",2,33,0,24,"2011-05-20","m",[16,20],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":13},115129,23,32,{"id":21,"product_name":22,"version_count":23,"cve_count":23,"kev_count":11,"last_cve_update":24},115130,"unix_mplayer",1,"2005-01-10","Mplayer is a technology vendor with 2 tracked products and 33 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[27,36,41,48,53,59,66,71,76,81],{"cveId":28,"description":29,"publishedDate":30,"cvssScore":31,"cvssVersion":32,"severity":33,"isKev":34,"epssScore":35},"CVE-2004-0386","Buffer overflow in the HTTP parser for MPlayer 1.0pre3 and earlier, 0.90, and 0.91 allows remote attackers to execute arbitrary code via a long Location header.","2004-05-04",10,"v2","Critical",false,0.2698,{"cveId":37,"description":38,"publishedDate":39,"cvssScore":31,"cvssVersion":32,"severity":33,"isKev":34,"epssScore":40},"CVE-2008-1558","Uncontrolled array index in the sdpplin_parse function in stream\u002Frealrtsp\u002Fsdpplin.c in MPlayer 1.0 rc2 allows remote attackers to overwrite memory and execute arbitrary code via a large streamid SDP parameter.  NOTE: this issue has been referred to as an integer overflow.","2008-03-31",0.16802,{"cveId":42,"description":43,"publishedDate":44,"cvssScore":45,"cvssVersion":32,"severity":46,"isKev":34,"epssScore":47},"CVE-2007-4938","Heap-based buffer overflow in libmpdemux\u002Faviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a .avi file with certain large \"indx truck size\" and nEntriesInuse values, and a certain wLongsPerEntry value.","2007-09-18",7.6,"High",0.16048,{"cveId":49,"description":50,"publishedDate":51,"cvssScore":31,"cvssVersion":32,"severity":33,"isKev":34,"epssScore":52},"CVE-2004-0659","Buffer overflow in TranslateFilename for common.c in MPlayer 1.0pre4 allows remote attackers to execute arbitrary code via a long file name.","2004-08-06",0.15655,{"cveId":54,"description":55,"publishedDate":56,"cvssScore":57,"cvssVersion":32,"severity":33,"isKev":34,"epssScore":58},"CVE-2008-3827","Multiple integer underflows in the Real demuxer (demux_real.c) in MPlayer 1.0_rc2 and earlier allow remote attackers to cause a denial of service (process termination) and possibly execute arbitrary code via a crafted video file that causes the stream_read function to read or write arbitrary memory.","2008-09-29",9.3,0.10939,{"cveId":60,"description":61,"publishedDate":62,"cvssScore":63,"cvssVersion":32,"severity":64,"isKev":34,"epssScore":65},"CVE-2008-4610","MPlayer allows remote attackers to cause a denial of service (application crash) via (1) a malformed AAC file, as demonstrated by lol-vlc.aac; or (2) a malformed Ogg Media (OGM) file, as demonstrated by lol-ffplay.ogm, different vectors than CVE-2007-6718.","2008-10-20",5,"Medium",0.09278,{"cveId":67,"description":68,"publishedDate":69,"cvssScore":57,"cvssVersion":32,"severity":33,"isKev":34,"epssScore":70},"CVE-2008-0485","Array index error in libmpdemux\u002Fdemux_mov.c in MPlayer 1.0 rc2 and earlier might allow remote attackers to execute arbitrary code via a QuickTime MOV file with a crafted stsc atom tag.","2008-02-05",0.08878,{"cveId":72,"description":73,"publishedDate":74,"cvssScore":31,"cvssVersion":32,"severity":33,"isKev":34,"epssScore":75},"CVE-2008-5616","Stack-based buffer overflow in the demux_open_vqf function in libmpdemux\u002Fdemux_vqf.c in MPlayer 1.0 rc2 before r28150 allows remote attackers to execute arbitrary code via a malformed TwinVQ file.","2008-12-17",0.07694,{"cveId":77,"description":78,"publishedDate":79,"cvssScore":57,"cvssVersion":32,"severity":33,"isKev":34,"epssScore":80},"CVE-2007-2948","Multiple stack-based buffer overflows in stream\u002Fstream_cddb.c in MPlayer before 1.0rc1try3 allow remote attackers to execute arbitrary code via a CDDB entry with a long (1) album title or (2) category.","2007-06-07",0.05748,{"cveId":82,"description":83,"publishedDate":84,"cvssScore":45,"cvssVersion":32,"severity":46,"isKev":34,"epssScore":85},"CVE-2007-1246","The DMO_VideoDecoder_Open function in loader\u002Fdmo\u002FDMO_VideoDecoder.c in MPlayer 1.0rc1 and earlier, as used in xine-lib, does not set the biSize before use in a memcpy, which allows user-assisted remote attackers to cause a buffer overflow and possibly execute arbitrary code, a different vulnerability than CVE-2007-1387.","2007-03-03",0.05736,[],[88,89],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":13},{"id":21,"product_name":22,"version_count":23,"cve_count":23,"kev_count":11,"last_cve_update":24},{"title":91,"metaDescription":92,"keywords":93,"structuredData":94},"Mplayer - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Mplayer covering 2 products with 33 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Mplayer vulnerabilities, Mplayer security, Mplayer CVE, Mplayer threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":95,"@type":96,"name":97,"description":92,"url":98},"https:\u002F\u002Fschema.org","Organization","Mplayer","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fmplayer",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":100,"apiVersion":101},"2026-10-17T12:38:21.158Z","3.0"]