PT-2007-6055 · Pandoratv · Mplayer

Published 2007-09-18 · Updated 2018-10-15 · CVE-2007-4941

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions KMPlayer versions 2.9.3.1210 and earlier

Description The issue allows remote attackers to cause a denial of service, specifically CPU consumption, by using a .avi file with certain large indx truck size and nEntriesInuse values.

Recommendations For KMPlayer versions 2.9.3.1210 and earlier, consider avoiding the use of .avi files with large indx truck size and nEntriesInuse values until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2007-4941

Affected Products

Mplayer

References · 8

• 🔥 https://exploit-db.com/exploits/30580 · Exploit
• 🔥 http://securityfocus.com/bid/25651 · Exploit
• 🔥 http://vulnhunt.com/advisories/CAL-20070912-1_Multiple_vendor_produce_handling_AVI_file_vulnerabilities.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-4941 · Security Note
• http://osvdb.org/45939 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36585 · Note
• http://securityreason.com/securityalert/3144 · Note
• http://securityfocus.com/archive/1/479222/100/0/threaded · Note