Media Player Classic .FLV Remote Denial Of Service Vulnerability

Bugtraq ID:	24830
Class:	Unknown
CVE:	CVE-2007-3662
Remote:	Yes
Local:	No
Published:	Jul 09 2007 12:00AM
Updated:	May 07 2015 05:37PM
Credit:	Michal Bucko is credited with the discovery of this issue.
Vulnerable:
Not Vulnerable:

Media Player Classic .FLV Remote Denial Of Service Vulnerability

Media Player Classic is prone to a remote denial-of-service vulnerability.

Attackers can exploit this issue to crash the application. Reports indicate that remote code execution may also be possible, but this has not been confirmed.

Media Player Classic 6.4.9.0 is vulnerable; other versions may also be affected.

Media Player Classic .FLV Remote Denial Of Service Vulnerability

To exploit this issue, an attacker must entice an unsuspecting user to open a malicious file with the affected application.

Media Player Classic .FLV Remote Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Media Player Classic .FLV Remote Denial Of Service Vulnerability

References:

• Vendor Homepage (Gabest.org) (guliverkli)