CVE-2007-4938

2007-09-1800:00:00

ubuntu.com

7.6 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.164 Low

EPSS

Percentile

96.0%

JSON

Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and
earlier allows remote attackers to cause a denial of service (application
crash) or possibly execute arbitrary code via a .avi file with certain
large “indx truck size” and nEntriesInuse values, and a certain
wLongsPerEntry value.

Bugs

<https://bugs.launchpad.net/ubuntu/+source/mplayer/+bug/140891>

Notes

Author	Note
jdstrand	fix in MDKSA-2007:192

OSVersionArchitecturePackageVersionFilename
ubuntu6.10noarchmplayer< 2:0.99+1.0pre8-0ubuntu8.1UNKNOWN
ubuntu7.04noarchmplayer< 2:1.0~rc1-0ubuntu9.2UNKNOWN
ubuntu7.10noarchmplayer< 2:1.0~rc1-0ubuntu13.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.10	noarch	mplayer	< 2:0.99+1.0pre8-0ubuntu8.1	UNKNOWN
ubuntu	7.04	noarch	mplayer	< 2:1.0~rc1-0ubuntu9.2	UNKNOWN
ubuntu	7.10	noarch	mplayer	< 2:1.0~rc1-0ubuntu13.1	UNKNOWN