Bug 6514 - mplayer: update to 1.0pre3try2
: mplayer: update to 1.0pre3try2
Status: CLOSED FIXED
Product: Security
Classification: Unclassified
Component: General / Other Security Issue
: unspecified
: Other other
: P2 normal
Assigned To: SM Security List
http://www.mplayerhq.hu/homepage/desi...
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2004-03-30 16:29 UTC by Clément MATHIEU
Modified: 2004-03-31 02:59 UTC (History)
0 users

See Also:


Attachments
patch (1.06 KB, patch)
2004-03-30 16:29 UTC, Clément MATHIEU
Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Clément MATHIEU 2004-03-30 16:29:21 UTC
Today on bugtraq: 
http://www.securityfocus.com/archive/1/359025/2004-03-27/2004-04-02/0
http://www.securityfocus.com/archive/1/359029/2004-03-27/2004-04-02/0
http://www.mplayerhq.hu/MPlayer/patches/vuln02-fix.diff

This issue seems to be a dummy memory allocation error.
I have not the time to check but the author thinks it's hardly exploitable.
Comment 1 Clément MATHIEU 2004-03-30 16:29:55 UTC
Created attachment 2983 [details]
patch
Comment 2 Seth Woolley 2004-03-31 02:59:46 UTC
Was updated earlier today about two minutes after it hit bugtraq.  probably
didn't show up right away because it the grimoires only update from perforce
every six hours.  Thanks for filing anyway ;)  Next time, if you can drop into
irc and check around to see if we noticed if it's right after announcement, that
would be great, I often don't file bugs for all of them since they take two
minutes to fix and five to file the bug.