CVE-2005-2718

Name: CVE-2005-2718
Creator: NVD / NIST
Published: 2005-08-29T20:14:00+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 3.26%

Last modified Jun 16, 2026

CVE-2005-2718 is a vulnerability of currently unknown severity. Buffer overflow in ad_pcm.c in MPlayer 1.0pre7 and earlier allows remote attackers to execute arbitrary code via crafted PCM audio data, as demonstrated using a video file with an audio header containing a large value in a stream format (strf) chunk.. EPSS estimates a 3.26% chance of exploitation in the next 30 days.

Description

Buffer overflow in ad_pcm.c in MPlayer 1.0pre7 and earlier allows remote attackers to execute arbitrary code via crafted PCM audio data, as demonstrated using a video file with an audio header containing a large value in a stream format (strf) chunk.

Metrics

EPSS Probability

3.26%

86.8th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Vendor	Product	Versions
Mplayer	Mplayer	<= 1.0_pre7

References

http://marc.info/?l=full-disclosure&m=112484733122809&w=2
http://www.mandriva.com/security/advisories?name=MDKSA-2005:158
http://www.securityfocus.com/bid/14652
http://www.sven-tantau.de/public_files/mplayer/mplayer_20050824.txtPatch, Vendor Advisory
https://bugs.gentoo.org/show_bug.cgi?id=103555Patch, Vendor Advisory
http://marc.info/?l=full-disclosure&m=112484733122809&w=2
http://www.mandriva.com/security/advisories?name=MDKSA-2005:158
http://www.securityfocus.com/bid/14652
http://www.sven-tantau.de/public_files/mplayer/mplayer_20050824.txtPatch, Vendor Advisory
https://bugs.gentoo.org/show_bug.cgi?id=103555Patch, Vendor Advisory

Timeline

Published: Aug 29, 2005
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2005-2718?

How severe is CVE-2005-2718?

Severity scoring for CVE-2005-2718 is pending analysis. The EPSS model estimates a 3.26% probability of exploitation in the next 30 days.

How do I fix CVE-2005-2718?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2005-2718?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST