CVE-2006-1502
Multiple integer overflows in MPlayer 1.0pre7try2 allow remote attackers to cause a denial of...
Multiple integer overflows in MPlayer 1.0pre7try2 allow remote attackers to cause a denial of service and trigger heap-based buffer overflows via (1) a certain ASF file handled by asfheader.c that causes the asf_descrambling function to be passed a negative integer after the conversion from a char to an int or (2) an AVI file with a crafted wLongsPerEntry or nEntriesInUse value in the indx chunk, which is handled in aviheader.c.
Exploit likelihood
What each source reports
NVD Score used
Multiple integer overflows in MPlayer 1.0pre7try2 allow remote attackers to cause a denial of service and trigger heap-based buffer overflows via (1) a certain ASF file handled by asfheader.c that causes the asf_descrambling function to be passed a negative integer after the conversion from a char to an int or (2) an AVI file with a crafted wLongsPerEntry or nEntriesInUse value in the indx chunk, which is handled in aviheader.c.
- Record
CVE-2006-1502- CVSS 2.0
- 5.1 Medium
AV:N/AC:H/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Multiple integer overflows in MPlayer 1.0pre7try2 allow remote attackers to cause a denial of service and trigger heap-based buffer overflows via (1) a certain ASF file handled by asfheader.c that causes the asf_descrambling function to be passed a negative integer after the conversion from a char to an int or (2) an AVI file with a crafted wLongsPerEntry or nEntriesInUse value in the indx chunk, which is handled in aviheader.c.
- Record
CVE-2006-1502- Updated
- 2026-11-02
EUVDEUVD-2006-1506 No score
Multiple integer overflows in MPlayer 1.0pre7try2 allow remote attackers to cause a denial of service and trigger heap-based buffer overflows via (1) a certain ASF file handled by asfheader.c that causes the asf_descrambling function to be passed a negative integer after the conversion from a char to an int or (2) an AVI file with a crafted wLongsPerEntry or nEntriesInUse value in the indx chunk, which is handled in aviheader.c.
- Record
EUVD-2006-1506- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hg2g-m2vg-v8q5 No score
Multiple integer overflows in MPlayer 1.0pre7try2 allow remote attackers to cause a denial of...
Multiple integer overflows in MPlayer 1.0pre7try2 allow remote attackers to cause a denial of service and trigger heap-based buffer overflows via (1) a certain ASF file handled by asfheader.c that causes the asf_descrambling function to be passed a negative integer after the conversion from a char to an int or (2) an AVI file with a crafted wLongsPerEntry or nEntriesInUse value in the indx chunk, which is handled in aviheader.c.
- Record
GHSA-hg2g-m2vg-v8q5- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-1502 is a medium vulnerability (CVSS 5.1) in Mplayer, published March 30, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.52%, the 89th percentile. No source names a fixed version.
References
exchange.xforce.ibmcloud.com/vulnerabilities/25513
secunia.com/advisories/19418
xfocus.org/advisories/200603/11.html
securityreason.com/securityalert/647
lists.grok.org.uk/pipermail/full-disclosure/2006-March/044615.html
gentoo.org/security/en/glsa/glsa-200605-01.xml
Show 13 moreShow less
osvdb.org/24247
securityfocus.com/archive/1/429251/100/0/threaded
securitytracker.com/id?1015842
mandriva.com/security/advisories?name=MDKSA-2006:068
vupen.com/english/advisories/2006/1156
nvd.nist.gov/vuln/detail/CVE-2006-1502
github.com/advisories/GHSA-hg2g-m2vg-v8q5