CVE-2007-4941

KDE Kmplayer < 2.9.3.1210 - Resource Management Error

Title source: rule

Description

KMPlayer 2.9.3.1210 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a .avi file with certain large "indx truck size" and nEntriesInuse values.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Code Audit Labs · textdoslinux

https://www.exploit-db.com/exploits/30580

View Code ZIP pw:eip

References (6)

Core 6

Core References

Exploit vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/25651

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/36585

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://osvdb.org/45939

Exploit x_refsource_misc

http://www.vulnhunt.com/advisories/CAL-20070912-1_Multiple_vendor_produce_handling_AVI_file_vulnerabilities.txt

Third Party Advisory third-party-advisory x_refsource_sreason

http://securityreason.com/securityalert/3144

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/479222/100/0/threaded

Scores

EPSS 0.0694

EPSS Percentile 91.5%

Details

CWE

CWE-399

Status published

Products (1)

kde/kmplayer < 2.9.3.1210

Published Sep 18, 2007

Tracked Since Feb 18, 2026