CVE:CVE-2008-4610
CNNVD:CNNVD-200810-308
Mplayer允许远程攻击者通过一个畸形的 AAC 文件, 例如lol-vlc.aac; 或者一个畸形的 Ogg Media (OGM) 文件, 例如lol-ffplay.ogm引起拒绝服务 (应用程序崩溃)。
solution:Upgrade mplayer mplayer to a higher version than 1.0_rc1,0.90,0.90_pre,0.90_rc,0.90_rc4,0.91,0.92,0.92.1,0.92_cvs,1.0_pre1,1.0_pre2,1.0_pre3,1.0_pre3try2,1.0_pre4,1.0_pre5,1.0_pre5try1,1.0_pre5try2,1.0_pre6,1.0_pre7,1.0_pre7try2,and avoid the version (,1.0_rc1],0.90,0.90_pre,0.90_rc,0.90_rc4,0.91,0.92,0.92.1,0.92_cvs,1.0_pre1,1.0_pre2,1.0_pre3,1.0_pre3try2,1.0_pre4,1.0_pre5,1.0_pre5try1,1.0_pre5try2,1.0_pre6,1.0_pre7,1.0_pre7try2