Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2007-1246
HistoryMar 03, 2007 - 7:19 p.m.

CVE-2007-1246

2007-03-0319:19:00
CWE-119
[email protected]
web.nvd.nist.gov
3

7.6 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

High

0.297 Low

EPSS

Percentile

97.0%

JSON

The DMO_VideoDecoder_Open function in loader/dmo/DMO_VideoDecoder.c in MPlayer 1.0rc1 and earlier, as used in xine-lib, does not set the biSize before use in a memcpy, which allows user-assisted remote attackers to cause a buffer overflow and possibly execute arbitrary code, a different vulnerability than CVE-2007-1387.

Affected configurations

NVD
Node
mplayermplayerRange≤1.0_rc1

References

Related

cve 2
ubuntucve 2
debiancve 2
openvas 22
nessus 13
gentoo 2
prion 2
nvd 1
securityvulns 1
cvelist 2
debian 1
ubuntu 2
slackware 1
freebsd 1
osv 1
cve
cve
CVE-2007-1387
2007-03-13 19:19:00
CVE-2007-1246
2007-03-03 19:19:00
ubuntucve
ubuntucve
CVE-2007-1387
2007-03-13 00:00:00
CVE-2007-1246
2007-03-03 00:00:00
debiancve
debiancve
CVE-2007-1387
2007-03-13 19:19:00
CVE-2007-1246
2007-03-03 19:19:00
openvas
openvas
Gentoo Security Advisory GLSA 200705-21 (mplayer)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200705-21 (mplayer)
2008-09-24 00:00:00
Debian Security Advisory DSA 1536-1 (xine-lib)
2008-04-07 00:00:00
nessus
nessus
GLSA-200705-21 : MPlayer: Two buffer overflows
2007-06-01 00:00:00
Mandrake Linux Security Advisory : mplayer (MDKSA-2007:055)
2007-03-12 00:00:00
Debian DSA-1536-1 : libxine - several vulnerabilities
2008-04-01 00:00:00
gentoo
gentoo
MPlayer: Two buffer overflows
2007-05-30 00:00:00
xine-lib: Heap-based buffer overflow
2007-04-14 00:00:00
prion
prion
Buffer overflow
2007-03-13 19:19:00
Buffer overflow
2007-03-03 19:19:00
nvd
nvd
CVE-2007-1387
2007-03-13 19:19:00
securityvulns
securityvulns
MPlayer DMO player buffer overflow
2007-03-01 00:00:00
cvelist
cvelist
CVE-2007-1246
2007-03-03 19:00:00
CVE-2007-1387
2007-03-13 19:00:00
debian
debian
[SECURITY] [DSA 1536-1] New libxine packages fix several vulnerabilities
2008-03-31 20:51:58
ubuntu
ubuntu
Xine vulnerability
2007-03-09 00:00:00
Xine vulnerability
2007-03-12 00:00:00
slackware
slackware
[slackware-security] xine-lib
2007-04-20 02:55:26
freebsd
freebsd
mplayer -- DMO File Parsing Buffer Overflow Vulnerability
2007-02-11 00:00:00
osv
osv
xine-lib - several vulnerabilities
2008-03-31 00:00:00

7.6 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

High

0.297 Low

EPSS

Percentile

97.0%

JSON
Related for NVD:CVE-2007-1246
cve2ubuntucve2debiancve2openvas22nessus13gentoo2prion2nvd1securityvulns1cvelist2debian1ubuntu2slackware1freebsd1osv1