PT-2007-2667 · Mplayer Team · Mplayer

Moritz Jodeit · Published 2007-03-03 · Updated 2018-10-16 · CVE-2007-1246

Positive Technologies (AI Summary)

CVSS v2.0

7.6

High

Base vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions MPlayer versions 1.0rc1 and earlier

Description The issue is related to the DMO VideoDecoder Open function in loader/dmo/DMO VideoDecoder.c, which does not set the biSize before use in a memcpy. This allows user-assisted remote attackers to cause a buffer overflow and possibly execute arbitrary code.

Recommendations For MPlayer versions 1.0rc1 and earlier, consider disabling the DMO VideoDecoder Open function until a patch is available. Restrict access to the vulnerable module to minimize the risk of exploitation. Avoid using the affected function in the meantime to prevent potential buffer overflow attacks.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2007-1246

DSA-1536-1

Affected Products

Mplayer

References · 30

• http://svn.mplayerhq.hu/mplayer/trunk/loader/dmo/DMO_VideoDecoder.c · Patch
• http://secunia.com/advisories/24995 · Vendor Advisory
• http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.449141 · Vendor Advisory
• http://secunia.com/advisories/24462 · Vendor Advisory
• http://secunia.com/advisories/24448 · Vendor Advisory
• http://secunia.com/advisories/24443 · Vendor Advisory
• http://vupen.com/english/advisories/2007/0794 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2007:055 · Vendor Advisory
• http://secunia.com/advisories/29601 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200705-21.xml · Vendor Advisory
• http://ubuntu.com/usn/usn-433-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-1246 · Vendor Advisory
• http://novell.com/linux/security/advisories/2007_007_suse.html · Vendor Advisory
• http://secunia.com/advisories/24444 · Vendor Advisory
• http://secunia.com/advisories/24446 · Vendor Advisory