Mandriva Linux Security Advisory – A vulnerability that was discovered in xine-lib that allowed remote RTSP servers to execute arbitrary code via a large streamid SDP parameter also affects MPlayer. Several integer overflows were discovered by Felipe Andres Manzano in MPlayer’s Real video stream demuxing code. These vulnerabilities could allow an attacker to cause a crash or possibly execute arbitrary code by supplying a malicious crafted video file. The updated packages have been patched to fix these issues. Note that CVE-2008-3827 was already corrected in the Mandriva Linux 2009 packages.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/71360/MDVSA-2008-219.txt
Source: https://packetstormsecurity.com/files/71360/Mandriva-Linux-Security-Advisory-2008-219.html