PT-2007-7259 · Mpc+1 · Media Player Classic+1

Published 2007-12-17 · Updated 2018-10-15 · CVE-2007-6402

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Media Player Classic (MPC) version 6.4.9

Description A stack-based buffer overflow issue exists, potentially allowing remote attackers to execute arbitrary code via a certain .mp4 file when used with the 3ivx 4.5.1 or 5.0.1 codec.

Recommendations For Media Player Classic (MPC) version 6.4.9, consider avoiding the use of the 3ivx 4.5.1 or 5.0.1 codec until a patch is available. As a temporary workaround, restrict the playback of .mp4 files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2007-6402

Affected Products

3Ivx

Media Player Classic

References · 7

• 🔥 http://securityfocus.com/bid/26774 · Exploit
• 🔥 https://exploit-db.com/exploits/4701 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-6402 · Security Note
• http://securityfocus.com/archive/1/484832/100/100/threaded · Note
• http://securitytracker.com/id?1019064 · Note
• http://vupen.com/english/advisories/2007/4141 · Note
• http://securityfocus.com/archive/1/484781/100/0/threaded · Note