Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2007-1387HistoryMar 13, 2007 - 7:19 p.m.
CVE-2007-1387
2007-03-1319:19:00
Debian Security Bug Tracker
security-tracker.debian.org
14
7.6 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
0.297 Low
EPSS
Percentile
97.0%
The DirectShow loader (loader/dshow/DS_VideoDecoder.c) in MPlayer 1.0rc1 and earlier, as used in xine-lib, does not set the biSize before use in a memcpy, which allows user-assisted remote attackers to cause a buffer overflow and possibly execute arbitrary code, a different vulnerability than CVE-2007-1246.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | mplayer | < 1.0~rc1-13 | mplayer_1.0~rc1-13_all.deb |
| Debian | 11 | all | mplayer | < 1.0~rc1-13 | mplayer_1.0~rc1-13_all.deb |
| Debian | 10 | all | mplayer | < 1.0~rc1-13 | mplayer_1.0~rc1-13_all.deb |
| Debian | 999 | all | mplayer | < 1.0~rc1-13 | mplayer_1.0~rc1-13_all.deb |
| Debian | 13 | all | mplayer | < 1.0~rc1-13 | mplayer_1.0~rc1-13_all.deb |
Related
cve
cve
CVE-2007-1387
2007-03-13 19:19:00
CVE-2007-1246
2007-03-03 19:19:00
ubuntucve
ubuntucve
CVE-2007-1387
2007-03-13 00:00:00
CVE-2007-1246
2007-03-03 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200705-21 (mplayer)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200705-21 (mplayer)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200704-09 (xine-lib)
2008-09-24 00:00:00
gentoo
gentoo
MPlayer: Two buffer overflows
2007-05-30 00:00:00
xine-lib: Heap-based buffer overflow
2007-04-14 00:00:00
debiancve
debiancve
CVE-2007-1246
2007-03-03 19:19:00
prion
prion
Buffer overflow
2007-03-13 19:19:00
Buffer overflow
2007-03-03 19:19:00
nvd
nvd
CVE-2007-1387
2007-03-13 19:19:00
CVE-2007-1246
2007-03-03 19:19:00
nessus
nessus
Mandrake Linux Security Advisory : mplayer (MDKSA-2007:055)
2007-03-12 00:00:00
GLSA-200705-21 : MPlayer: Two buffer overflows
2007-06-01 00:00:00
openSUSE 10 Security Update : xine-lib (xine-lib-2989)
2007-10-17 00:00:00
cvelist
cvelist
CVE-2007-1387
2007-03-13 19:00:00
CVE-2007-1246
2007-03-03 19:00:00
securityvulns
securityvulns
MPlayer DMO player buffer overflow
2007-03-01 00:00:00
ubuntu
ubuntu
Xine vulnerability
2007-03-12 00:00:00
Xine vulnerability
2007-03-09 00:00:00
slackware
slackware
[slackware-security] xine-lib
2007-04-20 02:55:26
freebsd
freebsd
mplayer -- DMO File Parsing Buffer Overflow Vulnerability
2007-02-11 00:00:00
osv
osv
xine-lib - several vulnerabilities
2008-03-31 00:00:00
debian
debian
[SECURITY] [DSA 1536-1] New libxine packages fix several vulnerabilities
2008-03-31 20:51:58
7.6 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
0.297 Low
EPSS
Percentile
97.0%
Related for DEBIANCVE:CVE-2007-1387