NVD

Id
53571  
Name
CVE-2007-1387  
Description
The DirectShow loader (loader/dshow/DS_VideoDecoder.c) in MPlayer 1.0rc1 and earlier, as used in xine-lib, does not set the biSize before use in a memcpy, which allows user-assisted remote attackers to cause a buffer overflow and possibly execute arbitrary code, a different vulnerability than CVE-2007-1246.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.2  
CVSS Vector
(AV:N/AC:H/Au:M/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-03-13  
Modified Date
2010-11-30  
Seq
2007-1387  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
271470 53571 CVE-2007-1387 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=414072  View
271471 53571 CVE-2007-1387 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=414072;msg=12;filename=DS_VideoDecoder.c---SVN--22205.patch;att=1  View
271472 53571 CVE-2007-1387 GLSA-200705-21  View
271473 53571 CVE-2007-1387 DSA-1536  View
271474 53571 CVE-2007-1387 MDKSA-2007:061  View
271475 53571 CVE-2007-1387 MDKSA-2007:062  View
271476 53571 CVE-2007-1387 22933  View
271477 53571 CVE-2007-1387 USN-435-1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
54796 JVNDB-2007-003488 xine-lib で使用される MPlayer におけるバッファオーバーフローの脆弱性 xine-lib で使用される MPlayer の DirectShow loader (loader/dshow/DS_VideoDecoder.c) は、memcpy で使用される前 biSize を設定しないため、バッファオーバーフローの脆弱性が存在します。 CVE-2007-1387 24742 CVE-2007-1387 53571 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003488.html 2007-03-13 2012-09-25 View