CVE-2007-6718

Severity Score

4.3

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

MPlayer, possibly 1.0rc1, allows remote attackers to cause a denial of service (SIGSEGV and application crash) via (1) a malformed MP3 file, as demonstrated by lol-mplayer.mp3; (2) a malformed Ogg Vorbis file, as demonstrated by lol-mplayer.ogg; (3) a malformed MPEG-1 file, as demonstrated by lol-mplayer.mpg; (4) a malformed MPEG-2 file, as demonstrated by lol-mplayer.m2v; (5) a malformed MPEG-4 AVI file, as demonstrated by lol-mplayer.avi; (6) a malformed FLAC file, as demonstrated by lol-mplayer.flac; (7) a malformed Ogg Theora file, as demonstrated by lol-mplayer.ogm; (8) a malformed WMV file, as demonstrated by lol-mplayer.wmv; or (9) a malformed AAC file, as demonstrated by lol-mplayer.aac. NOTE: vector 5 might overlap CVE-2007-4938, and vector 6 might overlap CVE-2008-0486.

MPlayer, posiblemente v1.0rc1, permite a atacantes remotos causar denegación de servicio (SIGSEGV y caída de aplicación) mediante (1) un archivo MP3 mal formado, como se ha demostrado en lol-mplayer.mp3; (2) un archivo mal formado Ogg Vorbis, como se ha demostrado en lol-mplayer.ogg; (3) un archivo mal formado MPEG-1, como se ha demostrado en lol-mplayer.mpg; (4) un archivo mal formado MPEG-2, como se ha demostrado en lol-mplayer.m2v; (5) un archivo mal formado MPEG-4 AVI, como se ha demostrado en lol-mplayer.avi; (6) un archivo mal formado FLAC, como se ha demostrado en lol-mplayer.flac; (7) un archivo mal formado Ogg Theora, como se ha demostrado en lol-mplayer.ogm; (8) un archivo mal formado WMV, como se ha demostrado en lol-mplayer.wmv; or (9) un archivo mal formado AAC, como se ha demostrado en lol-mplayer.aac. NOTA: el vector 5 podría superponerse a CVE-2007-4938, y el vector 6 podría superponerse a CVE-2008-0486.

*Credits: N/A

CVSS Scores

NISTv2 4.3

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2008-10-20 CVE Reserved
2008-10-20 CVE Published
2024-09-16 CVE Updated
2024-09-17 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (2)

URL	Tag	Source
http://sam.zoy.org/blog/2007-01-16-exposing-file-parsing-vulnerabilities	X_refsource_misc
http://www.openwall.com/lists/oss-security/2008/10/07/1	Mailing List

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Mplayer Search vendor "Mplayer"		Mplayer Search vendor "Mplayer" for product "Mplayer"				<= 1.0_rc1 Search vendor "Mplayer" for product "Mplayer" and version " <= 1.0_rc1"		-		Affected
Mplayer Search vendor "Mplayer"		Mplayer Search vendor "Mplayer" for product "Mplayer"				0.90 Search vendor "Mplayer" for product "Mplayer" and version "0.90"		-		Affected
Mplayer Search vendor "Mplayer"		Mplayer Search vendor "Mplayer" for product "Mplayer"				0.90_pre Search vendor "Mplayer" for product "Mplayer" and version "0.90_pre"		-		Affected
Mplayer Search vendor "Mplayer"		Mplayer Search vendor "Mplayer" for product "Mplayer"				0.90_rc Search vendor "Mplayer" for product "Mplayer" and version "0.90_rc"		-		Affected
Mplayer Search vendor "Mplayer"		Mplayer Search vendor "Mplayer" for product "Mplayer"				0.90_rc4 Search vendor "Mplayer" for product "Mplayer" and version "0.90_rc4"		-		Affected
Mplayer Search vendor "Mplayer"		Mplayer Search vendor "Mplayer" for product "Mplayer"				0.91 Search vendor "Mplayer" for product "Mplayer" and version "0.91"		-		Affected
Mplayer Search vendor "Mplayer"		Mplayer Search vendor "Mplayer" for product "Mplayer"				0.92 Search vendor "Mplayer" for product "Mplayer" and version "0.92"		-		Affected
Mplayer Search vendor "Mplayer"		Mplayer Search vendor "Mplayer" for product "Mplayer"				0.92.1 Search vendor "Mplayer" for product "Mplayer" and version "0.92.1"		-		Affected
Mplayer Search vendor "Mplayer"		Mplayer Search vendor "Mplayer" for product "Mplayer"				0.92_cvs Search vendor "Mplayer" for product "Mplayer" and version "0.92_cvs"		-		Affected
Mplayer Search vendor "Mplayer"		Mplayer Search vendor "Mplayer" for product "Mplayer"				1.0_pre1 Search vendor "Mplayer" for product "Mplayer" and version "1.0_pre1"		-		Affected
Mplayer Search vendor "Mplayer"		Mplayer Search vendor "Mplayer" for product "Mplayer"				1.0_pre2 Search vendor "Mplayer" for product "Mplayer" and version "1.0_pre2"		-		Affected
Mplayer Search vendor "Mplayer"		Mplayer Search vendor "Mplayer" for product "Mplayer"				1.0_pre3 Search vendor "Mplayer" for product "Mplayer" and version "1.0_pre3"		-		Affected
Mplayer Search vendor "Mplayer"		Mplayer Search vendor "Mplayer" for product "Mplayer"				1.0_pre3try2 Search vendor "Mplayer" for product "Mplayer" and version "1.0_pre3try2"		-		Affected
Mplayer Search vendor "Mplayer"		Mplayer Search vendor "Mplayer" for product "Mplayer"				1.0_pre4 Search vendor "Mplayer" for product "Mplayer" and version "1.0_pre4"		-		Affected
Mplayer Search vendor "Mplayer"		Mplayer Search vendor "Mplayer" for product "Mplayer"				1.0_pre5 Search vendor "Mplayer" for product "Mplayer" and version "1.0_pre5"		-		Affected
Mplayer Search vendor "Mplayer"		Mplayer Search vendor "Mplayer" for product "Mplayer"				1.0_pre5try1 Search vendor "Mplayer" for product "Mplayer" and version "1.0_pre5try1"		-		Affected
Mplayer Search vendor "Mplayer"		Mplayer Search vendor "Mplayer" for product "Mplayer"				1.0_pre5try2 Search vendor "Mplayer" for product "Mplayer" and version "1.0_pre5try2"		-		Affected
Mplayer Search vendor "Mplayer"		Mplayer Search vendor "Mplayer" for product "Mplayer"				1.0_pre6 Search vendor "Mplayer" for product "Mplayer" and version "1.0_pre6"		-		Affected
Mplayer Search vendor "Mplayer"		Mplayer Search vendor "Mplayer" for product "Mplayer"				1.0_pre7 Search vendor "Mplayer" for product "Mplayer" and version "1.0_pre7"		-		Affected
Mplayer Search vendor "Mplayer"		Mplayer Search vendor "Mplayer" for product "Mplayer"				1.0_pre7try2 Search vendor "Mplayer" for product "Mplayer" and version "1.0_pre7try2"		-		Affected