Gentoo Linux Security Advisory GLSA 200707-07 - Secunia Research discovered several boundary errors in the functions cddb_query_parse(), cddb_parse_matches_list() and cddb_read_parse(), each allowing for a stack-based buffer overflow. Versions less than 1.0.20070622 are affected.
b2192a9441e36df98290d94e602d1a6f20bb03b1df7f9121ef8d02097dc28623
Mandriva Linux Security Advisory - Multiple stack-based buffer overflows in stream/stream_cddb.c in MPlayer before 1.0rc1try3 allow remote attackers to execute arbitrary code via a CDDB entry with a long album title or category.
8811ea551aa8ea7aee91fb2aa3d1a5832405aa5c947b0b09a04858480aebcf0a
Debian Security Advisory 1313-1 - Stefan Cornelius and Reimar Doeffinger discovered that the MPlayer movie player performs insufficient boundary checks when accessing CDDB data, which might lead to the execution of arbitrary code.
249deea05498f73ad4a3f06eaa45d4b64df7f87b34781ca7512de62b516383b5