CVE-2007-1246: Buffer Overflow
The DMOVideoDecoderOpen function in loader/dmo/DMOVideoDecoder.c in MPlayer 1.0rc1 and earlier, as used in xine-lib, does not set the biSize before use in a memcpy, which allows user-assisted remote attackers to cause a buffer overflow and possibly execute arbitrary code, a different vulnerability than CVE-2007-1387.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2007-1246?
CVE-2007-1246 has a high severity due to its potential for causing a buffer overflow and executing arbitrary code.
How do I fix CVE-2007-1246?
To fix CVE-2007-1246, upgrade MPlayer to a version later than 1.0rc1 where the vulnerability has been patched.
What software is impacted by CVE-2007-1246?
CVE-2007-1246 impacts MPlayer version 1.0rc1 and earlier versions.
What kind of attacks can exploit CVE-2007-1246?
CVE-2007-1246 can be exploited by user-assisted remote attackers leading to potential arbitrary code execution.
Is there a known exploit for CVE-2007-1246?
Yes, CVE-2007-1246 has been identified as being vulnerable to buffer overflow attacks through improper handling in the DMO_VideoDecoder_Open function.