CVE-2007-3895

Buffer overflow in Microsoft DirectShow in Microsoft DirectX 7.0 through 10.0 allows remote attackers to execute arbitrary code via a crafted 1 WAV or 2 AVI file...

Buffer overflow

Buffer overflow in Microsoft DirectShow in Microsoft DirectX 7.0 through 10.0 allows remote attackers to execute arbitrary code via a crafted 1 WAV or 2 AVI file...

CVE-2007-3895

Buffer overflow in Microsoft DirectShow in Microsoft DirectX 7.0 through 10.0 allows remote attackers to execute arbitrary code via a crafted 1 WAV or 2 AVI file...

CVE-2007-3895

CVE-2007-3895 describes a buffer overflow in Microsoft DirectShow (part of DirectX) across Windows DirectX 7.0–10.0. A remote attacker could trigger code execution by convincing a user to open a specially crafted WAV or AVI file. The issue arises from improper parsing within DirectX libraries han...

Ubuntu 5.04 / 5.10 / 6.06 LTS : ffmpeg, xine-lib vulnerabilities (USN-358-1)

XFOCUS Security Team discovered that the AVI decoder used in xine-lib did not correctly validate certain headers. By tricking a user into playing an AVI with malicious headers, an attacker could execute arbitrary code with the target user's privileges. CVE-2006-4799 Multiple integer overflows wer...

DTSA-65-1 mplayer - denial of service via crafted .avi file

Bulletin has no description...

MPlayer buffer overflow

Buffer overflow on AVI files parsing...

Mandrake Linux Security Advisory : mplayer (MDKSA-2007:192)

A heap-based buffer overflow was found in MPlayer's AVI handling that could allow a remote attacker to cause a denial of service or possibly execute arbitrary code via a crafted .avi file. Updated packages have been patched to prevent this issue. %NASLMINLEVEL 70300 C Tenable Network Security, In...

Heap overflow

Heap-based buffer overflow in mplayerc.exe in Media Player Classic MPC 6.4.9.0 and earlier, as used standalone and in mympc aka CD-Storm 1.0.0.1, StormPlayer 1.0.4, and possibly other products, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary co...

CVE-2007-4938

Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a .avi file with certain large "indx truck size" and nEntriesInuse values, and a certain wLongsPerEntry...

DEBIAN-CVE-2007-4938

Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a .avi file with certain large "indx truck size" and nEntriesInuse values, and a certain wLongsPerEntry...

CVE-2007-4938

Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a .avi file with certain large "indx truck size" and nEntriesInuse values, and a certain wLongsPerEntry...

CVE-2007-4941

KMPlayer 2.9.3.1210 and earlier allows remote attackers to cause a denial of service CPU consumption via a .avi file with certain large "indx truck size" and nEntriesInuse values...

CVE-2007-4938

Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a .avi file with certain large "indx truck size" and nEntriesInuse values, and a certain wLongsPerEntry...

Heap overflow

Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a .avi file with certain large "indx truck size" and nEntriesInuse values, and a certain wLongsPerEntry...

Design/Logic Flaw

KMPlayer 2.9.3.1210 and earlier allows remote attackers to cause a denial of service CPU consumption via a .avi file with certain large "indx truck size" and nEntriesInuse values...

CVE-2007-4940

Multiple integer overflows in Media Player Classic MPC 6.4.9.0 and earlier, as used standalone and in mympc aka CD-Storm 1.0.0.1, StormPlayer 1.0.4, and possibly other products, allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a .avi fil...

CVE-2007-4939

The CVE describes a heap-based buffer overflow in mplayerc.exe used by Media Player Classic (MPC) 6.4.9.0 and earlier, including variants like mympc, StormPlayer, and CD-Storm. Affected component is mplayerc.exe handling certain .avi files, where an indx truck size of 0xffffffff together with spe...

CVE-2007-4938

Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a .avi file with certain large "indx truck size" and nEntriesInuse values, and a certain wLongsPerEntry...

CVE-2007-4941

KMPlayer 2.9.3.1210 and earlier allows remote attackers to cause a denial of service CPU consumption via a .avi file with certain large "indx truck size" and nEntriesInuse values...