NVD

Id
53449  
Name
CVE-2007-1246  
Description
The DMO_VideoDecoder_Open function in loader/dmo/DMO_VideoDecoder.c in MPlayer 1.0rc1 and earlier, as used in xine-lib, does not set the biSize before use in a memcpy, which allows user-assisted remote attackers to cause a buffer overflow and possibly execute arbitrary code, a different vulnerability than CVE-2007-1387.  
Reject
 
CVSS Version
2  
CVSS Score
7.6  
Severity
High  
CVSS Base Score
7.6  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-03-03  
Modified Date
2011-07-25  
Seq
2007-1246  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
270565 53449 CVE-2007-1246 20070301 MPlayer DMO buffer overflow  View
270566 53449 CVE-2007-1246 GLSA-200704-09  View
270567 53449 CVE-2007-1246 GLSA-200705-21  View
270568 53449 CVE-2007-1246 SSA:2007-109-02  View
270569 53449 CVE-2007-1246 http://svn.mplayerhq.hu/mplayer/trunk/loader/dmo/DMO_VideoDecoder.c  View
270570 53449 CVE-2007-1246 http://svn.mplayerhq.hu/mplayer/trunk/loader/dmo/DMO_VideoDecoder.c?r1=22019&r2=22204  View
270571 53449 CVE-2007-1246 DSA-1536  View
270572 53449 CVE-2007-1246 MDKSA-2007:055  View
270573 53449 CVE-2007-1246 MDKSA-2007:057  View
270574 53449 CVE-2007-1246 SUSE-SR:2007:007  View
270575 53449 CVE-2007-1246 SUSE-SR:2007:005  View
270576 53449 CVE-2007-1246 20070423 FLEA-2007-0013-1: xine-lib  View
270577 53449 CVE-2007-1246 22771  View
270578 53449 CVE-2007-1246 USN-433-1  View
270579 53449 CVE-2007-1246 ADV-2007-0794  View
270580 53449 CVE-2007-1246 mplayer-dmovideodecoder-bo(32747)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
54767 JVNDB-2007-003459 xine-lib で使用される MPlayer におけるバッファオーバーフローの脆弱性 xine-lib で使用される MPlayer の loader/dmo/DMO_VideoDecoder.c の DMO_VideoDecoder_Open 関数は、memcpy で使用される前 biSize を設定しないため、バッファオーバーフローの脆弱性が存在します。 CVE-2007-1246 24601 CVE-2007-1246 53449 7.6 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003459.html 2007-03-03 2012-09-25 View