← Database

CVE-2007-4938

HIGH CVSS: 7.6 Published: 2007-09-18 Modified: 2026-06-16

Description

Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a .avi file with certain large "indx truck size" and nEntriesInuse values, and a certain wLongsPerEntry value.

Affected Platforms

Microsoft Windows 98Hp Tru64Mandrakesoft Mandrake LinuxSun SolarisSanta Cruz Operation Sco UnixMicrosoft Windows NtMicrosoft Windows MeMicrosoft Windows XpMplayer MplayerLinux Linux Kernel

Weakness Type

CWE-119

References