CVE-2007-4938

Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a .avi file with certain large "indx truck size" and nEntriesInuse values, and a certain wLongsPerEntry value.

• Apple Mac Os X

  OS
  Apple
  all versions

• HP Ux

  OS
  Hp
  all versions

• HP Tru64

  OS
  Hp
  all versions

• IBM Aix

  OS
  Ibm
  all versions

• IBM Os2

  OS
  Ibm
  all versions

• Linux Kernel

  OS
  Linux
  all versions

• Mandrakesoft Mandrake Linux

  OS
  Mandrakesoft
  20072007.1

• Microsoft Windows 2000

  OS
  Microsoft
  all versions

• Microsoft Windows 2003 Server

  OS
  Microsoft
  all versions

• Microsoft Windows 98

  OS
  Microsoft
  all versions

• Microsoft Windows Me

  OS
  Microsoft
  all versions

• Microsoft Windows Nt

  OS
  Microsoft
  4.0

• Microsoft Windows Xp

  OS
  Microsoft
  all versions

• Mplayer

  APP
  Mplayer
  1.0_rc1

• Santa Cruz Operation Sco Unix

  OS
  Santa Cruz Operation
  all versions

• Sgi Irix

  OS
  Sgi
  all versions

• Sun Solaris

  OS
  Sun
  all versions

• Windriver Bsdos

  OS
  Windriver
  all versions