CVE-2007-6401 Stack-based buffer overflow in mplayer2.exe in Microsoft Windows Media Player (WMP) 6.4, when used with the 3ivx 4.5.1 or 5.0.1 codec, allows remote attackers to execute arbitrary code via a certain ....
HighCVSS 9.3
EPSS 29.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in mplayer2.exe in Microsoft Windows Media Player (WMP) 6.4, when used with the 3ivx 4.5.1 or 5.0.1 codec, allows remote attackers to execute arbitrary code via a certain .mp4 file, possibly a related issue to CVE-2007-6402.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| 3ivx mpeg-4 codec | = 4.5.1 | No fix listed |
| 3ivx mpeg-4 codec | = 5.0.1 | No fix listed |
| Microsoft windows media player | = 6.4 | No fix listed |
References
- 3453 third-party-advisory
- 20071208 Windows media player 6.4 MP4 Stack Overflow 0-day mailing-list
- 26773 exploit patch vdb-entry
- 1019064 vdb-entry
- ADV-2007-4141 vdb-entry