PT-2007-2667 · Mplayer Team · Mplayer

Moritz Jodeit · Publicado 2007-03-03 · Atualizado 2018-10-16 · CVE-2007-1246

Positive Technologies (AI Summary)

CVSS v2.0

7.6

Alta

Vetor base

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions MPlayer versions 1.0rc1 and earlier

Description The issue is related to the DMO VideoDecoder Open function in loader/dmo/DMO VideoDecoder.c, which does not set the biSize before use in a memcpy. This allows user-assisted remote attackers to cause a buffer overflow and possibly execute arbitrary code.

Recommendations For MPlayer versions 1.0rc1 and earlier, consider disabling the DMO VideoDecoder Open function until a patch is available. Restrict access to the vulnerable module to minimize the risk of exploitation. Avoid using the affected function in the meantime to prevent potential buffer overflow attacks.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2007-1246

DSA-1536-1

Produtos afetados

Mplayer

Referências · 30

• http://svn.mplayerhq.hu/mplayer/trunk/loader/dmo/DMO_VideoDecoder.c · Correção
• http://secunia.com/advisories/24995 · Aviso do Fabricante
• http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.449141 · Aviso do Fabricante
• http://secunia.com/advisories/24462 · Aviso do Fabricante
• http://secunia.com/advisories/24448 · Aviso do Fabricante
• http://securityfocus.com/bid/22771 · Nota
• http://secunia.com/advisories/24443 · Aviso do Fabricante
• http://vupen.com/english/advisories/2007/0794 · Aviso do Fabricante
• http://mandriva.com/security/advisories?name=MDKSA-2007:055 · Aviso do Fabricante
• http://secunia.com/advisories/29601 · Aviso do Fabricante
• http://security.gentoo.org/glsa/glsa-200705-21.xml · Aviso do Fabricante
• http://ubuntu.com/usn/usn-433-1 · Aviso do Fabricante
• http://lists.grok.org.uk/pipermail/full-disclosure/2007-March/052738.html · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-1246 · Aviso do Fabricante
• http://novell.com/linux/security/advisories/2007_007_suse.html · Aviso do Fabricante