CVE-2007-4938

high · 7.6

Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a .avi file with certain large "indx truck size" and nEntriesInuse values, and a certain wLongsPerEntry value.

7.6

CVSS

16.0%

EPSS (exploit prob.)

97th

EPSS percentile

2007-09-18

Published

AV:N/AC:H/Au:N/C:C/I:C/A:C

Weaknesses

CWE-119

Affected products

Vendor	Product	Affected versions
apple	mac_os_x	all versions
hp	hp-ux	all versions
hp	tru64	all versions
ibm	aix	all versions
ibm	os2	all versions
linux	linux_kernel	all versions
mandrakesoft	mandrake_linux	2007
mandrakesoft	mandrake_linux	2007
mandrakesoft	mandrake_linux	2007.1
mandrakesoft	mandrake_linux	2007.1
microsoft	windows_2000	all versions
microsoft	windows_2003_server	all versions
microsoft	windows_98	all versions
microsoft	windows_me	all versions
microsoft	windows_nt	4.0
microsoft	windows_xp	all versions
santa_cruz_operation	sco_unix	all versions
sun	solaris	all versions
windriver	bsdos	all versions
mplayer	mplayer	1.0_rc1
sgi	irix	all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2007-4938