CVE-2007-4939

Media Player Classic < 6.4.9.0 - Heap-Based Buffer Overflow via AVI File Indx Chunk

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-4939. PoCs published by Code Audit Labs.

AI-analyzed exploit summary The provided content describes a vulnerability in Media Player Classic (MPC) related to heap-based buffer overflow and integer overflow issues when handling malformed AVI files. It includes examples of malformed AVI header data that could trigger these vulnerabilities.

Description

Heap-based buffer overflow in mplayerc.exe in Media Player Classic (MPC) 6.4.9.0 and earlier, as used standalone and in mympc (aka CD-Storm) 1.0.0.1, StormPlayer 1.0.4, and possibly other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a .avi file with an "indx truck size" of 0xffffffff, and certain wLongsPerEntry and nEntriesInuse values.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Code Audit Labs · textdoslinux
https://www.exploit-db.com/exploits/30579

The provided content describes a vulnerability in Media Player Classic (MPC) related to heap-based buffer overflow and integer overflow issues when handling malformed AVI files. It includes examples of malformed AVI header data that could trigger these vulnerabilities.

Classification
Writeup 90%
Attack Type
Rce
Complexity
Moderate
Reliability
Theoretical
Target: Media Player Classic 6.4.9.0
No auth needed
Prerequisites: User interaction to open a malformed AVI file
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (11)

Core 11
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/36583
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/3144
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/26806
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/26808
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/3140
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/479222/100/0/threaded
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/26807
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/3141
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/25650
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/3142

Scores

EPSS 0.1191
EPSS Percentile 95.6%

Details

CWE
CWE-119
Status published
Products (3)
guliverkli/media_player_classic < 6.4.9.0
mympc/cd-storm 1.0.0.1
verycd/stormplayer 1.0.4
Published Sep 18, 2007
Tracked Since Feb 18, 2026