Vulnerability Name:

CVE-2007-6402 (CCN-38946)

Assigned:2007-12-07
Published:2007-12-07
Updated:2018-10-15
Summary:Stack-based buffer overflow in mplayerc.exe in Media Player Classic (MPC) 6.4.9, when used with the 3ivx 4.5.1 or 5.0.1 codec, allows remote attackers to execute arbitrary code via a certain .mp4 file, possibly a related issue to CVE-2007-6401.
CVSS v3 Severity:10.0 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Changed
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
CVSS v2 Severity:9.3 High (CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C)
7.7 High (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C/E:F/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Authentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
9.3 High (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C)
7.7 High (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C/E:F/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Athentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
Vulnerability Type:CWE-119
Vulnerability Consequences:Gain Access
References:Source: CCN
Type: BugTraq Mailing List, Fri Dec 07 2007 - 19:53:27 CST
Windows media player 6.4 MP4 Stack Overflow 0-day

Source: CCN
Type: BugTraq Mailing List, Fri Dec 07 2007 - 19:54:52 CST
Media Player Classic 6.4.9 MP4 Stack Overflow 0-day

Source: CCN
Type: BugTraq Mailing List, Mon Dec 17 2007 - 08:13:02 CST
jetAudio 7.0.5 COWON Media Center MP4 Stack Overflow

Source: MITRE
Type: CNA
CVE-2007-6401

Source: MITRE
Type: CNA
CVE-2007-6402

Source: CCN
Type: SA27998
3ivx MPEG-4 MP4 File Processing Buffer Overflows

Source: CCN
Type: SECTRACK ID: 1019064
Windows Media Player Stack Overflow in 3ivx Codec Lets Remote Users Execute Arbitrary Code

Source: CCN
Type: SourceForge.net: guliverkli
Home of VobSub, Media Player Classic (MPC) and other misc utils.

Source: CCN
Type: 3ivx Web site
3ivx MPEG-4

Source: CCN
Type: JetAudio Web site
JetAudio

Source: CCN
Type: Microsoft Web site
Microsoft Windows Media

Source: CCN
Type: OSVDB ID: 42579
3ivx MPEG-4 on Microsoft Windows Media Player (WMP) mplayer2.exe MP4 File Handling Overflow

Source: CCN
Type: OSVDB ID: 42580
3ivx MPEG-4 Codec on Media Player Classic (MPC) mplayerc.exe MP4 File Handling Overflow

Source: BUGTRAQ
Type: UNKNOWN
20071208 Media Player Classic 6.4.9 MP4 Stack Overflow 0-day

Source: BUGTRAQ
Type: UNKNOWN
20071210 Re: Media Player Classic 6.4.9 MP4 Stack Overflow 0-day

Source: CCN
Type: BID-26773
3ivx MPEG-4 Multiple Remote Stack Based Buffer Overflow Vulnerabilities

Source: BID
Type: Exploit
26774

Source: CCN
Type: BID-26774
RETIRED: Media Player Classic Unspecified Remote Stack Buffer Overflow Vulnerability

Source: SECTRACK
Type: UNKNOWN
1019064

Source: VUPEN
Type: UNKNOWN
ADV-2007-4141

Source: XF
Type: UNKNOWN
3ivx-3ivxdsmediasplitter-bo(38946)

Vulnerable Configuration:Configuration 1:
  • cpe:/a:3ivx:mpeg-4_codec:4.5.1:*:*:*:*:*:*:*
  • OR cpe:/a:3ivx:mpeg-4_codec:5.0.1:*:*:*:*:*:*:*
  • OR cpe:/a:guliverkli:media_player_classic:6.4.9.0:*:*:*:*:*:*:*

  • Configuration CCN 1:
  • cpe:/a:microsoft:windows_media_player:6.4:*:*:*:*:*:*:*

  • * Denotes that component is vulnerable
    BACK
    3ivx mpeg-4 codec 4.5.1
    3ivx mpeg-4 codec 5.0.1
    guliverkli media player classic 6.4.9.0
    microsoft windows media player 6.4