Media Player Classic Remote Malformed Video File Remote Denial of Service Vulnerability

Bugtraq ID:	25686
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Sep 17 2007 12:00AM
Updated:	Sep 17 2007 08:30PM
Credit:	[email protected] is credited with the discovery of this issue.
Vulnerable:	guliverkli Media Player Classic 6.4.9 0 guliverkli Media Player Classic 6.4.9.1
Not Vulnerable:

Media Player Classic Remote Malformed Video File Remote Denial of Service Vulnerability

Media Player Classic is prone to a remote denial-of-service vulnerability because the application fails to handle malformed video files.

Remote attackers can exploit this issue to crash the application. Reports indicate that attackers may also be able to execute code, but this has not been confirmed.

Media Player Classic 6.4.9.1 and prior versions are vulnerable.

Media Player Classic Remote Malformed Video File Remote Denial of Service Vulnerability

An attacker can exploit this issue by enticing an unsuspecting victim into opening a malicious video file.

Media Player Classic Remote Malformed Video File Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

Media Player Classic Remote Malformed Video File Remote Denial of Service Vulnerability

References:

• Media Player Classic Homepage (guliverkli)