PRIOn knowledge basePRION:CVE-2007-4938Heap overflow
8.5 High
AI Score
Confidence
High
7.6 High
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
0.169 Low
EPSS
Percentile
95.9%
Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a .avi file with certain large “indx truck size” and nEntriesInuse values, and a certain wLongsPerEntry value.
References
osvdb.org/45940
secunia.com/advisories/27016
securityreason.com/securityalert/3144
www.mandriva.com/security/advisories?name=MDKSA-2007:192
www.securityfocus.com/archive/1/479222/100/0/threaded
www.securityfocus.com/bid/25648
www.vulnhunt.com/advisories/CAL-20070912-1_Multiple_vendor_produce_handling_AVI_file_vulnerabilities.txt
exchange.xforce.ibmcloud.com/vulnerabilities/36581
Related
8.5 High
AI Score
Confidence
High
7.6 High
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
0.169 Low
EPSS
Percentile
95.9%