PT-2007-4039 · Mpc Hc Team · Media Player Classic

CVE-2007-2723 · Publicado 2007-05-16 · Atualizado 2024-02-02

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Media Player Classic version 6.4.9.0

Description The issue allows remote attackers to cause a denial of service, resulting in a web browser crash, by utilizing an "empty" .MPA file. This triggers a divide-by-zero error.

Recommendations For Media Player Classic version 6.4.9.0, consider avoiding the use of .MPA files until a patch is available to prevent the divide-by-zero error and subsequent denial of service.

Correção

DoS

Divide By Zero

Enumeração de Fraquezas

CWE-369

Identificadores relacionados

CVE-2007-2723

Produtos afetados

Media Player Classic

Referências · 8

• https://nvd.nist.gov/vuln/detail/CVE-2007-2723 · Nota de Segurança
• http://securityfocus.com/archive/1/468626/100/0/threaded · Nota
• http://osvdb.org/37376 · Nota
• http://securityfocus.com/archive/1/468758/100/0/threaded · Nota
• http://securityfocus.com/archive/1/archive/1/468626/100/0/threaded · Nota
• http://securityfocus.com/bid/23991 · Nota
• http://xforce.iss.net/xforce/xfdb/34299 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34299 · Nota