Mandrake Linux Security Advisory : mplayer (MDKSA-2007:192)

A heap-based buffer overflow was found in MPlayer's AVI handling that could allow a remote attacker to cause a denial of service or possibly execute arbitrary code via a crafted .avi file. Updated packages have been patched to prevent this issue. %NASLMINLEVEL 70300 C Tenable Network Security, In...

CVE-2007-4938

Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a .avi file with certain large "indx truck size" and nEntriesInuse values, and a certain wLongsPerEntry...

Heap overflow

Heap-based buffer overflow in mplayerc.exe in Media Player Classic MPC 6.4.9.0 and earlier, as used standalone and in mympc aka CD-Storm 1.0.0.1, StormPlayer 1.0.4, and possibly other products, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary co...

CVE-2007-4938

Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a .avi file with certain large "indx truck size" and nEntriesInuse values, and a certain wLongsPerEntry...

DEBIAN-CVE-2007-4938

Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a .avi file with certain large "indx truck size" and nEntriesInuse values, and a certain wLongsPerEntry...

CVE-2007-4938

Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a .avi file with certain large "indx truck size" and nEntriesInuse values, and a certain wLongsPerEntry...

CVE-2007-4941

KMPlayer 2.9.3.1210 and earlier allows remote attackers to cause a denial of service CPU consumption via a .avi file with certain large "indx truck size" and nEntriesInuse values...

Heap overflow

Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a .avi file with certain large "indx truck size" and nEntriesInuse values, and a certain wLongsPerEntry...

Design/Logic Flaw

KMPlayer 2.9.3.1210 and earlier allows remote attackers to cause a denial of service CPU consumption via a .avi file with certain large "indx truck size" and nEntriesInuse values...

CVE-2007-4940

Multiple integer overflows in Media Player Classic MPC 6.4.9.0 and earlier, as used standalone and in mympc aka CD-Storm 1.0.0.1, StormPlayer 1.0.4, and possibly other products, allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a .avi fil...

CVE-2007-4939

The CVE describes a heap-based buffer overflow in mplayerc.exe used by Media Player Classic (MPC) 6.4.9.0 and earlier, including variants like mympc, StormPlayer, and CD-Storm. Affected component is mplayerc.exe handling certain .avi files, where an indx truck size of 0xffffffff together with spe...

CVE-2007-4938

MPlayer up to 1.0rc1 (and earlier) is affected by a vulnerability where remote attackers can trigger a denial of service (SIGSEGV and application crash) by supplying malformed multimedia files. The confirmed vectors include malformed MP3, Ogg Vorbis, MPEG-1/2, AVI, FLAC, Ogg Theora, WMV, and AAC ...

CVE-2007-4941

KMPlayer 2.9.3.1210 and earlier allows remote attackers to cause a denial of service CPU consumption via a .avi file with certain large "indx truck size" and nEntriesInuse values...

CVE-2007-4939

Heap-based buffer overflow in mplayerc.exe in Media Player Classic MPC 6.4.9.0 and earlier, as used standalone and in mympc aka CD-Storm 1.0.0.1, StormPlayer 1.0.4, and possibly other products, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary co...

CVE-2007-4938

Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a .avi file with certain large "indx truck size" and nEntriesInuse values, and a certain wLongsPerEntry...

CVE-2007-4938

Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a .avi file with certain large "indx truck size" and nEntriesInuse values, and a certain wLongsPerEntry...

Media Player Classic畸形AVI头字段数据多个远程漏洞

Media Player Classic是一款流行的媒体播放器。 Media Player Classic处理AVI文件头部数据存在问题，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 构建包含畸形头字段的AVI文件，诱使用户使用MPC打开，可导致发生缓冲区溢出，可导致拒绝服务或者以应用程序权限执行任意指令。 guliverkli Media Player Classic 6.4.9 0 目前没有详细解决方案提供： http://sourceforge.net/projects/guliverkli/ 69 6E 64 78 FF FF FF FF 01 00 64 73 20 00...

Multiple video players memory corruption

Memory corruption on malformed AVI file...

CAL-20070912-1 Multiple vendor produce handling AVI file vulnerabilities

CAL-20070912-1 Multiple vendor produce handling AVI file vulnerabilities Code Audit Labs http://www.vulnhunt.com Code Audit for some popular media player and discovered some vulnerabilities. one heap overflow was discovered in MPlayer. one heap overflow and one integer overflow were discovered in...

Media Player Classic 6.4.9 - Malformed AVI Header Multiple Remote Vulnerabilities

Media Player Classic 6.4.9 - Malformed AVI Header Multiple Remote Vulnerabilities source: https://www.securityfocus.com/bid/25650/info Media Player Classic MPC is prone to multiple remote vulnerabilities, including a heap-based buffer-overflow issue and an integer-overflow issue, when handling...