PT-2007-6054 · Gabest · Media Player Classic

Published 2007-09-18 · Updated 2018-10-15 · CVE-2007-4940

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Media Player Classic versions 6.4.9.0 and earlier mympc versions 1.0.0.1 and earlier StormPlayer versions 1.0.4 and earlier

Description The issue is caused by multiple integer overflows in Media Player Classic, which can be exploited by remote attackers through a specially crafted .avi file. This file would contain certain large indx truck size and nEntriesInuse values, potentially leading to a denial of service or the execution of arbitrary code.

Recommendations For Media Player Classic versions 6.4.9.0 and earlier, update to a version later than 6.4.9.0 to resolve the issue. For mympc versions 1.0.0.1 and earlier, update to a version later than 1.0.0.1 to resolve the issue. For StormPlayer versions 1.0.4 and earlier, update to a version later than 1.0.4 to resolve the issue. As a temporary workaround, consider avoiding the use of .avi files with large indx truck size and nEntriesInuse values until a patch is available.

Exploit

Fix

DoS

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2007-4940

Affected Products

Media Player Classic

References · 8

• 🔥 http://vulnhunt.com/advisories/CAL-20070912-1_Multiple_vendor_produce_handling_AVI_file_vulnerabilities.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-4940 · Security Note
• http://securityreason.com/securityalert/3144 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36584 · Note
• http://securityfocus.com/bid/25650 · Note
• http://securityfocus.com/archive/1/479222/100/0/threaded · Note
• http://securityfocus.com/archive/1/archive/1/479222/100/0/threaded · Note
• http://xforce.iss.net/xforce/xfdb/36584 · Note