CVE-2007-6402 Stack-based buffer overflow in mplayerc.exe in Media Player Classic (MPC) 6.4.9, when used with the 3ivx 4.5.1 or 5.0.1 codec, allows remote attackers to execute arbitrary code via a certain .mp4 file...
HighCVSS 9.3
EPSS 5.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in mplayerc.exe in Media Player Classic (MPC) 6.4.9, when used with the 3ivx 4.5.1 or 5.0.1 codec, allows remote attackers to execute arbitrary code via a certain .mp4 file, possibly a related issue to CVE-2007-6401.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| 3ivx mpeg-4 codec | = 4.5.1 | No fix listed |
| 3ivx mpeg-4 codec | = 5.0.1 | No fix listed |
| guliverkli media player classic | = 6.4.9.0 | No fix listed |
References
- 20071208 Media Player Classic 6.4.9 MP4 Stack Overflow 0-day mailing-list
- 20071210 Re: Media Player Classic 6.4.9 MP4 Stack Overflow 0-day mailing-list
- 26774 exploit vdb-entry
- 1019064 vdb-entry
- ADV-2007-4141 vdb-entry