CVE-2007-4940: Integer Overflow
Multiple integer overflows in Media Player Classic (MPC) 6.4.9.0 and earlier, as used standalone and in mympc (aka CD-Storm) 1.0.0.1, StormPlayer 1.0.4, and possibly other products, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a .avi file with certain large "indx truck size" and nEntriesInuse values.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-4940?
CVE-2007-4940 is classified as a high-severity vulnerability due to its potential to cause denial of service and arbitrary code execution.
How do I fix CVE-2007-4940?
To fix CVE-2007-4940, update Media Player Classic, StormPlayer, and Cd-Storm to their latest versions that are not affected by this vulnerability.
What types of attacks can exploit CVE-2007-4940?
CVE-2007-4940 can be exploited to execute arbitrary code or crash the application by specially crafted .avi files.
Which versions of Media Player Classic are affected by CVE-2007-4940?
CVE-2007-4940 affects Media Player Classic version 6.4.9.0 and earlier.
Is there a workaround for CVE-2007-4940 while waiting for a fix?
A potential workaround for CVE-2007-4940 is to avoid opening .avi files from untrusted sources until an update is applied.