CVE-2007-4885 Avnex AV MP3 Player allows user-assisted remote attackers to cause a denial of service (application crash) via a malformed .au file that triggers a divide-by-zero error.

MediumCVSS 4.3 EPSS 0.98%

Published: 2007-09-14 17:23 (approximate time: when CVE Radar first recorded it)
Updated: 2026-06-17 01:44
Exploit status: No public exploit known

Description

Avnex AV MP3 Player allows user-assisted remote attackers to cause a denial of service (application crash) via a malformed .au file that triggers a divide-by-zero error.

Affected products

Product	Affected versions	Fixed in
avnex av mp3 player	All versions	No fix listed

References

20070911 RealPlayer/HelixPlayer .au Divide-By-Zero Denial of Service Vulnerability mailing-list

CVSS v2.0

4.3 Medium

AV:N/AC:M/Au:N/C:N/I:N/A:P

Access Vector: Network
Access Complexity: Medium
Authentication: None
Confidentiality: None
Integrity: None
Availability: Partial

Weakness & likelihood

EPSS (exploitation probability, 30 days): 0.98% (percentile 62.8)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.