Test ID:	1.3.6.1.4.1.25623.1.0.50752
Category:	Mandrake Local Security Checks
Title:	Mandrake Security Advisory MDKSA-2003:097 (mplayer)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to mplayer announced via advisory MDKSA-2003:097. A buffer overflow vulnerability was found in MPlayer that is remotely exploitable. A malicious host can craft a harmful ASX header and trick MPlayer into executing arbitrary code when it parses that particular header. The provided packages have been patched to fix the problem. Affected versions: 9.1, 9.2 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. https://secure1.securityspace.com/smysecure/catid.html?in=MDKSA-2003:097 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0835 http://www.mplayerhq.hu/homepage/design6/news.html Risk factor : High CVSS Score: 7.5
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2003-0835 Bugtraq: 20030925 MPlayer Security Advisory #01: Remotely exploitable buffer overflow (Google Search) http://marc.info/?l=bugtraq&m=106454257221455&w=2 Bugtraq: 20030926 Mplayer Buffer Overflow (Google Search) http://marc.info/?l=bugtraq&m=106460912721618&w=2 Bugtraq: 20030929 GLSA: media-video/mplayer (200309-15) (Google Search) http://marc.info/?l=bugtraq&m=106485005213109&w=2 Conectiva Linux advisory: CLA-2003:760 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000760
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.