CVE-2007-1387

Published: Mar 13, 2007Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:H/Au:M/C:C/I:C/A:C

Exploitability: 3.2 / Impact: 10.0

Source: NVD

Description

The DirectShow loader (loader/dshow/DS_VideoDecoder.c) in MPlayer 1.0rc1 and earlier, as used in xine-lib, does not set the biSize before use in a memcpy, which allows user-assisted remote attackers to cause a buffer overflow and possibly execute arbitrary code, a different vulnerability than CVE-2007-1246.

Affected (1)

Products: Mplayer: Mplayer

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mplayer Mplayer	Up to 1.0_rc1

References (26)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=414072

Source: security@ubuntu.com

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=414072%3Bmsg=12%3Bfilename=DS_VideoDecoder.c---SVN--22205.patch%3Batt=1

Source: security@ubuntu.com

http://secunia.com/advisories/24443

Source: security@ubuntu.com

http://secunia.com/advisories/24444

Source: security@ubuntu.com

http://secunia.com/advisories/24462

Source: security@ubuntu.com

Vendor Advisory

http://secunia.com/advisories/25462

Source: security@ubuntu.com

http://secunia.com/advisories/29601

Source: security@ubuntu.com

http://security.gentoo.org/glsa/glsa-200705-21.xml

Source: security@ubuntu.com

http://www.debian.org/security/2008/dsa-1536

Source: security@ubuntu.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:061

Source: security@ubuntu.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:062

Source: security@ubuntu.com

http://www.securityfocus.com/bid/22933

Source: security@ubuntu.com

https://usn.ubuntu.com/435-1/

Source: security@ubuntu.com

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=414072

Source: af854a3a-2127-422b-91ae-364da2661108

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=414072%3Bmsg=12%3Bfilename=DS_VideoDecoder.c---SVN--22205.patch%3Batt=1

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/24443

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/24444

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/24462

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/25462

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/29601

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-200705-21.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2008/dsa-1536

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2007:061

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2007:062

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/22933

Source: af854a3a-2127-422b-91ae-364da2661108

https://usn.ubuntu.com/435-1/

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.