PT-2007-7258 · Microsoft+1 · Windows Media Player+1

Publicado 2007-12-17 · Atualizado 2018-10-15 · CVE-2007-6401

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows Media Player version 6.4

Description A stack-based buffer overflow issue exists when Windows Media Player 6.4 is used with the 3ivx 4.5.1 or 5.0.1 codec, allowing remote attackers to execute arbitrary code via a certain .mp4 file.

Recommendations For Windows Media Player version 6.4, consider updating to a newer version to mitigate the risk, or avoid using the 3ivx 4.5.1 or 5.0.1 codec with this version of Windows Media Player.

Exploit

Correção

RCE

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2007-6401

Produtos afetados

3Ivx

Windows Media Player

Referências · 7

• 🔥 https://exploit-db.com/exploits/4702 · Exploit
• 🔥 http://securityfocus.com/bid/26773 · Exploit
• http://securityreason.com/securityalert/3453 · Nota
• http://securityfocus.com/archive/1/484779/100/0/threaded · Nota
• http://vupen.com/english/advisories/2007/4141 · Nota
• http://securitytracker.com/id?1019064 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-6401 · Nota de Segurança