PT-2007-4039 · Mpc Hc Team · Media Player Classic

Published 2007-05-16 · Updated 2024-02-02 · CVE-2007-2723

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Media Player Classic version 6.4.9.0

Description The issue allows remote attackers to cause a denial of service, resulting in a web browser crash, by utilizing an "empty" .MPA file. This triggers a divide-by-zero error.

Recommendations For Media Player Classic version 6.4.9.0, consider avoiding the use of .MPA files until a patch is available to prevent the divide-by-zero error and subsequent denial of service.

Fix

DoS

Divide By Zero

Weakness Enumeration

CWE-369

Related Identifiers

CVE-2007-2723

Affected Products

Media Player Classic

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2007-2723 · Security Note
• http://securityfocus.com/archive/1/468626/100/0/threaded · Note
• http://osvdb.org/37376 · Note
• http://securityfocus.com/archive/1/468758/100/0/threaded · Note
• http://securityfocus.com/archive/1/archive/1/468626/100/0/threaded · Note
• http://securityfocus.com/bid/23991 · Note
• http://xforce.iss.net/xforce/xfdb/34299 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34299 · Note