Vulnerabilities > CVE-2007-4940 - Numeric Errors vulnerability in multiple products

047910
CVSS 9.3 - CRITICAL
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
guliverkli
mympc
verycd
CWE-189
critical
NVD
Published: 2007-09-18
Updated: 2018-10-15

Summary

Multiple integer overflows in Media Player Classic (MPC) 6.4.9.0 and earlier, as used standalone and in mympc (aka CD-Storm) 1.0.0.1, StormPlayer 1.0.4, and possibly other products, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a .avi file with certain large "indx truck size" and nEntriesInuse values.

Vulnerable Configurations

Part Description Count
Application
Guliverkli
1
Application
Mympc
1
Application
Verycd
1

Common Weakness Enumeration (CWE)

References