• info
• discussion
• exploit
• solution
• references

MPlayer MMST Stream ID Remote Buffer Overflow Vulnerability

Solution:
The vendor has released a patch dealing with this issue. Please see the referenced advisory for details on obtaining and applying the appropriate updates.


Turbolinux Home

• Turbolinux xine-lib-1rc3c-14.i586.rpm
  Turbolinux 10 Desktop, Turbolinux 10 F..., Turbolinux Home
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/u pdates/RPMS/xine-lib-1rc3c-14.i586.rpm


• Turbolinux xine-lib-devel-1rc3c-14.i586.rpm
  Turbolinux 10 Desktop, Turbolinux 10 F..., Turbolinux Home
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/u pdates/RPMS/xine-lib-devel-1rc3c-14.i586.rpm


• Turbolinux xine-lib-wmf-1rc3c-14.i586.rpm
  Turbolinux 10 Desktop, Turbolinux 10 F..., Turbolinux Home
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/u pdates/RPMS/xine-lib-wmf-1rc3c-14.i586.rpm

xine xine 1-rc5

• Ubuntu libxine-dev_1-rc5-1ubuntu2.2_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine-dev_1-r c5-1ubuntu2.2_amd64.deb


• Ubuntu libxine-dev_1-rc5-1ubuntu2.2_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine-dev_1-r c5-1ubuntu2.2_i386.deb


• Ubuntu libxine-dev_1-rc5-1ubuntu2.2_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine-dev_1-r c5-1ubuntu2.2_powerpc.deb


• Ubuntu libxine-dev_1.0-1ubuntu3.1_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine-dev_1.0 -1ubuntu3.1_amd64.deb


• Ubuntu libxine-dev_1.0-1ubuntu3.1_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine-dev_1.0 -1ubuntu3.1_i386.deb


• Ubuntu libxine-dev_1.0-1ubuntu3.1_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine-dev_1.0 -1ubuntu3.1_powerpc.deb


• Ubuntu libxine1_1-rc5-1ubuntu2.2_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1_1-rc5- 1ubuntu2.2_amd64.deb


• Ubuntu libxine1_1-rc5-1ubuntu2.2_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1_1-rc5- 1ubuntu2.2_i386.deb


• Ubuntu libxine1_1-rc5-1ubuntu2.2_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1_1-rc5- 1ubuntu2.2_powerpc.deb


• Ubuntu libxine1_1.0-1ubuntu3.1_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1_1.0-1u buntu3.1_amd64.deb


• Ubuntu libxine1_1.0-1ubuntu3.1_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1_1.0-1u buntu3.1_i386.deb


• Ubuntu libxine1_1.0-1ubuntu3.1_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1_1.0-1u buntu3.1_powerpc.deb

MMS Ripper MMS Ripper 0.4

• MMS Ripper mmsrip-0.6.4.tar.gz
  http://nbenoit.tuxfamily.org/projects/mmsrip/mmsrip-0.6.4.tar.gz

MMS Ripper MMS Ripper 0.4.1

• MMS Ripper mmsrip-0.6.4.tar.gz
  http://nbenoit.tuxfamily.org/projects/mmsrip/mmsrip-0.6.4.tar.gz

MMS Ripper MMS Ripper 0.4.2

• MMS Ripper mmsrip-0.6.4.tar.gz
  http://nbenoit.tuxfamily.org/projects/mmsrip/mmsrip-0.6.4.tar.gz

MMS Ripper MMS Ripper 0.6

• MMS Ripper mmsrip-0.6.4.tar.gz
  http://nbenoit.tuxfamily.org/projects/mmsrip/mmsrip-0.6.4.tar.gz

MMS Ripper MMS Ripper 0.6.2

• MMS Ripper mmsrip-0.6.4.tar.gz
  http://nbenoit.tuxfamily.org/projects/mmsrip/mmsrip-0.6.4.tar.gz

MPlayer MPlayer 1.0 pre3

• MPlayer mmst_fix_20050415.diff
  http://www.mplayerhq.hu/MPlayer/patches/mmst_fix_20050415.diff

MPlayer MPlayer 1.0 pre5try2

• MPlayer mmst_fix_20050415.diff
  http://www.mplayerhq.hu/MPlayer/patches/mmst_fix_20050415.diff

MPlayer MPlayer 1.0 pre5try1

• MPlayer mmst_fix_20050415.diff
  http://www.mplayerhq.hu/MPlayer/patches/mmst_fix_20050415.diff

MPlayer MPlayer 1.0 pre4

• MPlayer mmst_fix_20050415.diff
  http://www.mplayerhq.hu/MPlayer/patches/mmst_fix_20050415.diff

xine xine 1.0

• Ubuntu libxine-dev_1-rc5-1ubuntu2.2_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine-dev_1-r c5-1ubuntu2.2_amd64.deb


• Ubuntu libxine-dev_1-rc5-1ubuntu2.2_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine-dev_1-r c5-1ubuntu2.2_i386.deb


• Ubuntu libxine-dev_1-rc5-1ubuntu2.2_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine-dev_1-r c5-1ubuntu2.2_powerpc.deb


• Ubuntu libxine-dev_1.0-1ubuntu3.1_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine-dev_1.0 -1ubuntu3.1_amd64.deb


• Ubuntu libxine-dev_1.0-1ubuntu3.1_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine-dev_1.0 -1ubuntu3.1_i386.deb


• Ubuntu libxine-dev_1.0-1ubuntu3.1_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine-dev_1.0 -1ubuntu3.1_powerpc.deb


• Ubuntu libxine1_1-rc5-1ubuntu2.2_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1_1-rc5- 1ubuntu2.2_amd64.deb


• Ubuntu libxine1_1-rc5-1ubuntu2.2_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1_1-rc5- 1ubuntu2.2_i386.deb


• Ubuntu libxine1_1-rc5-1ubuntu2.2_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1_1-rc5- 1ubuntu2.2_powerpc.deb


• Ubuntu libxine1_1.0-1ubuntu3.1_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1_1.0-1u buntu3.1_amd64.deb


• Ubuntu libxine1_1.0-1ubuntu3.1_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1_1.0-1u buntu3.1_i386.deb


• Ubuntu libxine1_1.0-1ubuntu3.1_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/x/xine-lib/libxine1_1.0-1u buntu3.1_powerpc.deb

MPlayer MPlayer 1.0 pre5

• MPlayer mmst_fix_20050415.diff
  http://www.mplayerhq.hu/MPlayer/patches/mmst_fix_20050415.diff

MPlayer MPlayer 1.0 pre6

• MPlayer mmst_fix_20050415.diff
  http://www.mplayerhq.hu/MPlayer/patches/mmst_fix_20050415.diff

Turbolinux Turbolinux Desktop 10.0

• Turbolinux xine-lib-1rc3c-14.i586.rpm
  Turbolinux 10 Desktop, Turbolinux 10 F..., Turbolinux Home
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/u pdates/RPMS/xine-lib-1rc3c-14.i586.rpm


• Turbolinux xine-lib-devel-1rc3c-14.i586.rpm
  Turbolinux 10 Desktop, Turbolinux 10 F..., Turbolinux Home
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/u pdates/RPMS/xine-lib-devel-1rc3c-14.i586.rpm


• Turbolinux xine-lib-wmf-1rc3c-14.i586.rpm
  Turbolinux 10 Desktop, Turbolinux 10 F..., Turbolinux Home
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/u pdates/RPMS/xine-lib-wmf-1rc3c-14.i586.rpm