CVE-2007-4939

Heap-based buffer overflow in mplayerc.exe in Media Player Classic (MPC) 6.4.9.0 and earlier, as used standalone and in mympc (aka CD-Storm) 1.0.0.1, StormPlayer 1.0.4, and possibly other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a .avi file with an "indx truck size" of 0xffffffff, and certain wLongsPerEntry and nEntriesInuse values.

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

11.91% chance of exploitation in the next 30 days, 96th percentile

Published

2007-09-18

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/30579

References

• CVE Record
• NVD entry

Related

• CVE-2007-4938
• CVE-2007-4941
• CVE-2007-4937
• CVE-2007-4942
• CVE-2007-4934
• CVE-2007-4952