CVE:CVE-2007-4940
CNNVD:CNNVD-200709-250
Media Player Classic (MPC)存在多个整数值溢出,用于标准版本和mympc (又称CD-Storm) 1.0.0.1, StormPlayer 1.0.4,和可能的其他版本，远程攻击者可以借助一个具有特定大的"indx truck size"和nEntriesInuse值的 .avi 文件造成拒绝服务(应用程序崩溃) 或可能执行任意代码。
solution:Upgrade guliverkli media_player_classic to a higher version than 6.4.9.0,and avoid the version (,6.4.9.0]; Upgrade mympc cd-storm to a higher version than 1.0.0.1,and avoid the version 1.0.0.1; Upgrade verycd stormplayer to a higher version than 1.0.4,and avoid the version 1.0.4