PT-2007-7259 · Mpc+1 · Media Player Classic+1

Publicado 2007-12-17 · Atualizado 2018-10-15 · CVE-2007-6402

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Media Player Classic (MPC) version 6.4.9

Description A stack-based buffer overflow issue exists, potentially allowing remote attackers to execute arbitrary code via a certain .mp4 file when used with the 3ivx 4.5.1 or 5.0.1 codec.

Recommendations For Media Player Classic (MPC) version 6.4.9, consider avoiding the use of the 3ivx 4.5.1 or 5.0.1 codec until a patch is available. As a temporary workaround, restrict the playback of .mp4 files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2007-6402

Produtos afetados

3Ivx

Media Player Classic

Referências · 7

• 🔥 http://securityfocus.com/bid/26774 · Exploit
• 🔥 https://exploit-db.com/exploits/4701 · Exploit
• http://securityfocus.com/archive/1/484832/100/100/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-6402 · Nota de Segurança
• http://securitytracker.com/id?1019064 · Nota
• http://vupen.com/english/advisories/2007/4141 · Nota
• http://securityfocus.com/archive/1/484781/100/0/threaded · Nota