CVE-2007-4941 KMPlayer 2.9.3.1210 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a .avi file with certain large "indx truck size" and nEntriesInuse values.
HighCVSS 7.1
EPSS 3.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
KMPlayer 2.9.3.1210 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a .avi file with certain large "indx truck size" and nEntriesInuse values.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| KDE kmplayer | <= 2.9.3.1210 | No fix listed |
References
- 45939 vdb-entry
- 3144 third-party-advisory
- 20070912 CAL-20070912-1 Multiple vendor produce handling AVI file vulnerabilities mailing-list
- 25651 exploit vdb-entry
- www.vulnhunt.com exploit
- kmplayer-avi-dos(36585) vdb-entry