CVE-2007-4939: Buffer Overflow
Heap-based buffer overflow in mplayerc.exe in Media Player Classic (MPC) 6.4.9.0 and earlier, as used standalone and in mympc (aka CD-Storm) 1.0.0.1, StormPlayer 1.0.4, and possibly other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a .avi file with an "indx truck size" of 0xffffffff, and certain wLongsPerEntry and nEntriesInuse values.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-4939?
The severity of CVE-2007-4939 is considered to be high due to the potential for remote attackers to trigger a denial of service or execute arbitrary code.
How do I fix CVE-2007-4939?
To fix CVE-2007-4939, users should upgrade Media Player Classic to a version later than 6.4.9.0 and ensure that other affected software like StormPlayer and CD-Storm are also updated.
What products are affected by CVE-2007-4939?
CVE-2007-4939 affects Media Player Classic versions up to 6.4.9.0, StormPlayer version 1.0.4, and CD-Storm version 1.0.0.1.
What type of vulnerability is CVE-2007-4939?
CVE-2007-4939 is a heap-based buffer overflow vulnerability that can lead to application crashes and potential code execution.
Can CVE-2007-4939 be exploited remotely?
Yes, CVE-2007-4939 can be exploited remotely by attackers through maliciously crafted files.