CVE-2013-3489
https://notcve.org/view.php?id=CVE-2013-3489
Buffer overflow in Media Player Classic - Home Cinema (MPC-HC) before 1.7.0 allows remote attackers to execute arbitrary code via a crafted RealMedia .rm file Un desbordamiento del búfer en Media Player Classic - Home Cinema (MPC-HC) versiones anteriores a 1.7.0, permite a atacantes remotos ejecutar código arbitrario por medio de un archivo .rm de RealMedia . • http://mpc-hc.org/2013/09/29/1.7.0-released https://exchange.xforce.ibmcloud.com/vulnerabilities/87695 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVE-2013-3488
https://notcve.org/view.php?id=CVE-2013-3488
Stack-based buffer overflow in Media Player Classic - Home Cinema (MPC-HC) before 1.7.0.7858 allows remote attackers to execute arbitrary code via a crafted MPEG-2 Transport Stream (M2TS) file. Un desbordamiento del búfer en la región stack de la memoria en Media Player Classic - Home Cinema (MPC-HC) versiones anteriores a 1.7.0.7858, permite a atacantes remotos ejecutar código arbitrario por medio de un archivo MPEG-2 Transport Stream (M2TS) diseñado. • http://mpc-hc.org/2013/09/29/1.7.0-released https://exchange.xforce.ibmcloud.com/vulnerabilities/87695 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVE-2019-17260
https://notcve.org/view.php?id=CVE-2019-17260
MPC-HC through 1.7.13 allows a Read Access Violation on a Block Data Move starting at mpc_hc!memcpy+0x000000000000004e. MPC-HC versiones hasta 1.7.13, permite una Violación de Acceso de Lectura en un Block Data Move que inicia en mpc_hc!memcpy+0x000000000000004e. • https://github.com/linhlhq/research/blob/master/README.md https://mpc-hc.org/changelog • CWE-125: Out-of-bounds Read •
CVE-2007-2723
https://notcve.org/view.php?id=CVE-2007-2723
Media Player Classic 6.4.9.0 allows user-assisted remote attackers to cause a denial of service (web browser crash) via an "empty" .MPA file, which triggers a divide-by-zero error. Media Player Classic 6.4.9.0 permite a atacantes con la intervención del usuario provocar denegación de servicio (caida del navegador web) a través de un fichero .MPA "vacio", lo cual dispara un error de división por cero. • http://osvdb.org/37376 http://www.securityfocus.com/archive/1/468626/100/0/threaded http://www.securityfocus.com/archive/1/468758/100/0/threaded http://www.securityfocus.com/bid/23991 https://exchange.xforce.ibmcloud.com/vulnerabilities/34299 • CWE-369: Divide By Zero •