Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2007-4940

Опубликовано: 18 сент. 2007
Источник: nvd
CVSS2: 9.3
EPSS Низкий

Описание

Multiple integer overflows in Media Player Classic (MPC) 6.4.9.0 and earlier, as used standalone and in mympc (aka CD-Storm) 1.0.0.1, StormPlayer 1.0.4, and possibly other products, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a .avi file with certain large "indx truck size" and nEntriesInuse values.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:guliverkli:media_player_classic:*:*:*:*:*:*:*:*
Версия до 6.4.9.0 (включая)
cpe:2.3:a:mympc:cd-storm:1.0.0.1:*:*:*:*:*:*:*
cpe:2.3:a:verycd:stormplayer:1.0.4:*:*:*:*:*:*:*

EPSS

Процентиль: 85%
0.02589
Низкий

9.3 Critical

CVSS2

Дефекты

CWE-189

Связанные уязвимости

github
почти 4 года назад

Multiple integer overflows in Media Player Classic (MPC) 6.4.9.0 and earlier, as used standalone and in mympc (aka CD-Storm) 1.0.0.1, StormPlayer 1.0.4, and possibly other products, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a .avi file with certain large "indx truck size" and nEntriesInuse values.

EPSS

Процентиль: 85%
0.02589
Низкий

9.3 Critical

CVSS2

Дефекты

CWE-189