CVE-2007-4939

Guliverkli Media Player Classic < 6.4.9.0 - Memory Corruption

Title source: rule
STIX 2.1

Description

Heap-based buffer overflow in mplayerc.exe in Media Player Classic (MPC) 6.4.9.0 and earlier, as used standalone and in mympc (aka CD-Storm) 1.0.0.1, StormPlayer 1.0.4, and possibly other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a .avi file with an "indx truck size" of 0xffffffff, and certain wLongsPerEntry and nEntriesInuse values.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Code Audit Labs · textdoslinux
https://www.exploit-db.com/exploits/30579

References (11)

Core 11
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/36583
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/3144
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/26806
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/26808
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/3140
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/479222/100/0/threaded
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/26807
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/3141
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/25650
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/3142

Scores

EPSS 0.2319
EPSS Percentile 96.0%

Details

CWE
CWE-119
Status published
Products (3)
guliverkli/media_player_classic < 6.4.9.0
mympc/cd-storm 1.0.0.1
verycd/stormplayer 1.0.4
Published Sep 18, 2007
Tracked Since Feb 18, 2026