CVE-2013-3489

Published: Jan 31, 2020Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Buffer overflow in Media Player Classic - Home Cinema (MPC-HC) before 1.7.0 allows remote attackers to execute arbitrary code via a crafted RealMedia .rm file

Affected (1)

Products: Mpc Hc: Mpc Hc

Mpc Hc

1 product

Mpc Hc

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mpc Hc Mpc Hc	Before 1.7.0

Related CWEs

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (4)

http://mpc-hc.org/2013/09/29/1.7.0-released

Source: PSIRT-CNA@flexerasoftware.com

Release NotesVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/87695

Source: PSIRT-CNA@flexerasoftware.com

Third Party AdvisoryVDB Entry

http://mpc-hc.org/2013/09/29/1.7.0-released

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/87695

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

Timeline

No history available yet.