CVE-2007-4939

The CVE describes a heap-based buffer overflow in mplayerc.exe used by Media Player Classic (MPC) 6.4.9.0 and earlier, including variants like mympc, StormPlayer, and CD-Storm. Affected component is mplayerc.exe handling certain .avi files, where an indx truck size of 0xffffffff together with spe...

CVE-2007-4938

Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a .avi file with certain large "indx truck size" and nEntriesInuse values, and a certain wLongsPerEntry...

CVE-2007-4939

Heap-based buffer overflow in mplayerc.exe in Media Player Classic MPC 6.4.9.0 and earlier, as used standalone and in mympc aka CD-Storm 1.0.0.1, StormPlayer 1.0.4, and possibly other products, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary co...

CVE-2007-4938

MPlayer up to 1.0rc1 (and earlier) is affected by a vulnerability where remote attackers can trigger a denial of service (SIGSEGV and application crash) by supplying malformed multimedia files. The confirmed vectors include malformed MP3, Ogg Vorbis, MPEG-1/2, AVI, FLAC, Ogg Theora, WMV, and AAC ...

CVE-2007-4941

KMPlayer 2.9.3.1210 and earlier allows remote attackers to cause a denial of service CPU consumption via a .avi file with certain large "indx truck size" and nEntriesInuse values...

CVE-2007-4938

Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a .avi file with certain large "indx truck size" and nEntriesInuse values, and a certain wLongsPerEntry...

Media Player Classic畸形AVI头字段数据多个远程漏洞

Media Player Classic是一款流行的媒体播放器。 Media Player Classic处理AVI文件头部数据存在问题，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 构建包含畸形头字段的AVI文件，诱使用户使用MPC打开，可导致发生缓冲区溢出，可导致拒绝服务或者以应用程序权限执行任意指令。 guliverkli Media Player Classic 6.4.9 0 目前没有详细解决方案提供： http://sourceforge.net/projects/guliverkli/ 69 6E 64 78 FF FF FF FF 01 00 64 73 20 00...

Multiple video players memory corruption

Memory corruption on malformed AVI file...

CAL-20070912-1 Multiple vendor produce handling AVI file vulnerabilities

CAL-20070912-1 Multiple vendor produce handling AVI file vulnerabilities Code Audit Labs http://www.vulnhunt.com Code Audit for some popular media player and discovered some vulnerabilities. one heap overflow was discovered in MPlayer. one heap overflow and one integer overflow were discovered in...

KMPlayer 2.9.3.1214 - Multiple Remote Denial of Service Vulnerabilities

KMPlayer 2.9.3.1214 - Multiple Remote Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/25651/info KMPlayer is prone to multiple denial-of-service vulnerabilities when handling malformed AVI media files. Successfully exploiting this issue allows remote attackers to deny...

Media Player Classic 6.4.9 - Malformed AVI Header Multiple Remote Vulnerabilities

Media Player Classic 6.4.9 - Malformed AVI Header Multiple Remote Vulnerabilities source: https://www.securityfocus.com/bid/25650/info Media Player Classic MPC is prone to multiple remote vulnerabilities, including a heap-based buffer-overflow issue and an integer-overflow issue, when handling...

MPlayer 1.0 - AVIHeader.C Heap Buffer Overflow

MPlayer 1.0 - AVIHeader.C Heap Buffer Overflow source: https://www.securityfocus.com/bid/25648/info MPlayer is prone to a heap-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input data. Attackers can exploit this issue to execute arbitrar...

KMPlayer 2.9.3.1214 - Multiple Remote Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/25651/info KMPlayer is prone to multiple denial-of-service vulnerabilities when handling malformed AVI media files. Successfully exploiting this issue allows remote attackers to deny service to legitimate users. These issues affect KMPlayer 2.9.3.1210;...

Media Player Classic 6.4.9 - Malformed AVI Header Multiple Remote Vulnerabilities

source: https://www.securityfocus.com/bid/25650/info Media Player Classic MPC is prone to multiple remote vulnerabilities, including a heap-based buffer-overflow issue and an integer-overflow issue, when handling malformed AVI files. An attacker can exploit these issues to execute arbitrary code...

Xvid Avi MBCoding.C远程代码执行漏洞

Xvid是一款多媒体解码程序。 Xvid处理恶意Avi文件存在问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 问题存在于MBCoding.c代码中，攻击者可以构建恶意.Avi文件，诱使用户访问来触发。 Xvid 1.1.2 目前没有详细漏洞解决方案提供： http://www.xvid.org/...

CVE-2007-3329

Multiple array index errors in the 1 getintrablock, 2 getinterblockh263, and 3 getinterblockmpeg functions in src/bitstream/mbcoding.c in Xvid 1.1.2 allow remote attackers to execute arbitrary code via a crafted a Avi, b H.263, or c MPEG file...

CVE-2007-3329

Multiple array index errors in the 1 getintrablock, 2 getinterblockh263, and 3 getinterblockmpeg functions in src/bitstream/mbcoding.c in Xvid 1.1.2 allow remote attackers to execute arbitrary code via a crafted a Avi, b H.263, or c MPEG file...

Design/Logic Flaw

Multiple array index errors in the 1 getintrablock, 2 getinterblockh263, and 3 getinterblockmpeg functions in src/bitstream/mbcoding.c in Xvid 1.1.2 allow remote attackers to execute arbitrary code via a crafted a Avi, b H.263, or c MPEG file...

CVE-2007-3329

Xvid 1.1.2 has array indexing vulnerabilities in mbcoding.c (get_intra_block, get_inter_block_h263, get_inter_block_mpeg) that allow remote code execution via crafted AVI/H.263/MPEG files; Gentoo GLSA 200708-02 recommends upgrading to >= xvid-1.1.3 as remediation. No exploitable details beyond...

CVE-2007-3329

Multiple array index errors in the 1 getintrablock, 2 getinterblockh263, and 3 getinterblockmpeg functions in src/bitstream/mbcoding.c in Xvid 1.1.2 allow remote attackers to execute arbitrary code via a crafted a Avi, b H.263, or c MPEG file...