CVE-2004-0659

Buffer overflow in TranslateFilename for common.c in MPlayer 1.0pre4 allows remote attackers to execute arbitrary code via a long file name

published July 13, 2004

CVSS
—
EPSS
16%
Percentile
96.8
In the wild
Unconfirmed
What it is

⚠️ A long file name is all it takes to exploit this buffer overflow in MPlayer! Imagine letting a guest write their name on a reservation book, but they can fit an entire novel instead! 📚 Think of it like a restaurant that allows customers to order food but doesn’t check the quantity — if someone orders enough spaghetti to feed a hundred, it could cause chaos in the kitchen! An attacker could craft an overly lengthy file name to trigger a buffer overflow, potentially executing arbitrary code on the system. This could lead to unauthorized access or even total control over the affected system, resulting in catastrophic data loss or compromise.

Put simply

Think of it like a restaurant that allows customers to order food but doesn’t check the quantity — if someone orders enough spaghetti to feed a hundred, it could cause chaos in the kitchen! This vulnerability in MPlayer’s `TranslateFilename` function allows a buffer overflow due to insufficient checks on file name lengths, enabling attackers to inject and execute malicious code remotely.

What to do

An attacker could craft an overly lengthy file name to trigger a buffer overflow, potentially executing arbitrary code on the system. This could lead to unauthorized access or even total control over the affected system, resulting in catastrophic data loss or compromise. To secure against this vulnerability, ensure you are using a patched version of MPlayer that resolves this buffer overflow issue. Regularly update your software and consider implementing input validation to limit the length of file names processed. You've got this! By following these steps, you can keep your system safe and sound! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.15655 · 96.8th percentile
Published
2004-07-13T04:00Z
EPSS history
Timeline
  • 13 JUL 04:00Z
    Buffer overflow in TranslateFilename for common.c in MPlayer 1.0pre4 allows remote attackers to execute arbitrary code via a long file name
    cvelistv5