PT-2007-6055 · Pandoratv · Mplayer

Publicado 2007-09-18 · Atualizado 2018-10-15 · CVE-2007-4941

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions KMPlayer versions 2.9.3.1210 and earlier

Description The issue allows remote attackers to cause a denial of service, specifically CPU consumption, by using a .avi file with certain large indx truck size and nEntriesInuse values.

Recommendations For KMPlayer versions 2.9.3.1210 and earlier, consider avoiding the use of .avi files with large indx truck size and nEntriesInuse values until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2007-4941

Produtos afetados

Mplayer

Referências · 8

• 🔥 https://exploit-db.com/exploits/30580 · Exploit
• 🔥 http://securityfocus.com/bid/25651 · Exploit
• 🔥 http://vulnhunt.com/advisories/CAL-20070912-1_Multiple_vendor_produce_handling_AVI_file_vulnerabilities.txt · Exploit
• http://osvdb.org/45939 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36585 · Nota
• http://securityreason.com/securityalert/3144 · Nota
• http://securityfocus.com/archive/1/479222/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-4941 · Nota de Segurança