CVE-2007-6402

2007-12-1718:46:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2007-6402

media player classic

mpc

buffer overflow

3ivx

4.5.1

5.0.1

remote code execution

vulnerability

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8 High

AI Score

Confidence

Low

0.886 High

EPSS

Percentile

98.7%

JSON

Stack-based buffer overflow in mplayerc.exe in Media Player Classic (MPC) 6.4.9, when used with the 3ivx 4.5.1 or 5.0.1 codec, allows remote attackers to execute arbitrary code via a certain .mp4 file, possibly a related issue to CVE-2007-6401.

Affected configurations

NVD

Node

3ivxmpeg-4_codecMatch4.5.1

3ivxmpeg-4_codecMatch5.0.1

guliverklimedia_player_classicMatch6.4.9.0

CPENameOperatorVersion
3ivx:mpeg-4_codec3ivx mpeg-4 codeceq4.5.1
3ivx:mpeg-4_codec3ivx mpeg-4 codeceq5.0.1
guliverkli:media_player_classicguliverkli media player classiceq6.4.9.0

CPE	Name	Operator	Version
3ivx:mpeg-4_codec	3ivx mpeg-4 codec	eq	4.5.1
3ivx:mpeg-4_codec	3ivx mpeg-4 codec	eq	5.0.1
guliverkli:media_player_classic	guliverkli media player classic	eq	6.4.9.0