CVE:CVE-2007-4939
CNNVD:CNNVD-200709-245
Media Player Classic (MPC)中的mplayerc.exe存在堆缓冲区溢出,比如用于standalone和mympc (又称CD-Storm) 1.0.0.1版本, StormPlayer 1.0.4版本,以及可能的其他产品,远程攻击者可以借助一个具有0xffffffff的"indx truck size"以及特定wLongsPerEntry和nEntriesInuse值的 .avi文件造成拒绝服务(应用程序崩溃) 或可能执行任意代码。
solution:Upgrade guliverkli media_player_classic to a higher version than 6.4.9.0,and avoid the version (,6.4.9.0]; Upgrade mympc cd-storm to a higher version than 1.0.0.1,and avoid the version 1.0.0.1; Upgrade verycd stormplayer to a higher version than 1.0.4,and avoid the version 1.0.4