Security Advisory SA26806 - Media Player Classic AVI File Processing Buffer Overflow

Secunia

Blog

Secunia Advisory SA26806

Media Player Classic AVI File Processing Buffer Overflow

Secunia Advisory

SA26806

Release Date

2007-09-13

Last Update

2007-11-20

Popularity

25,213 views

Comments

3 comments

Criticality level

Highly critical

Impact

System access

Where

From remote

Authentication level

This information is available to Secunia VIM customers

Report reliability

This information is available to Secunia VIM customers

Solution Status

Unpatched

Systems affected

This information is available to Secunia VIM customers

Approve distribution

This information is available to Secunia VIM customers

Remediation status

Secunia VIM

Software:

Media Player Classic 6.x

Secunia CVSS Score

This information is available to Secunia VIM Customers

CVE Reference(s)

CVE-2007-4939 CVSS score available to Secunia VIM customers

Description

Code Audit Labs has discovered a vulnerability in Media Player Classic, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to an input validation error when processing .AVI files and can be exploited to cause a buffer overflow via a .AVI file with a specially crafted "indx" chunk.

Successful exploitation allows execution of arbitrary code.

The vulnerability is confirmed in version 6.4.9.0. Other versions may also be affected.

Solution
The original version is no longer maintained and an official fix is not available.

Provided and/or discovered by
Code Audit Labs

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://www.vulnhunt.com/advisories/CAL-20070912-1_Multiple_vendor_produce_handling_AVI_file_vulnerabilities.txt

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available to Secunia VIM customers

Do you have additional information related to this advisory?

Please provide information about patches, mitigating factors, new versions, exploits, faulty patches, links, and other relevant data by posting comments to this Advisory. You can also send this information to vuln@secunia.com

Subject: Media Player Classic AVI File Processing Buffer Overflow

User

Message

cyberquotient

RE: Media Player Classic AVI File Processing Buffer Overflow

2nd Mar, 2010 04:52

Score: -2
Posts: 11
User Since: 24th Feb 2010
System Score: N/A
Location: US
Last edited on 2nd Mar, 2010 04:53

There is a later version of Media Player Classic than the one identified in this vulnerability - 6.4.9.1. The latest version of QuickTime Alternative (3.1.1) bundles that version. Is this vulnerability confirmed there?

Was this reply relevant?

-0

M.Hansen	RE: Media Player Classic AVI File Processing Buffer Overflow
	2nd Mar, 2010 08:27
Score: 188 Posts: 376 User Since: 26th Jan 2009 System Score: N/A Location: Copenhagen, DK	Hi The original creators of Media Player Classic has disbanded the project and Media Player Classic is now End-Of-Life. There is however a new project based on Media Player Classic called Media Player Classic Home Cinema which is still supported.

cyberquotient	RE: Media Player Classic AVI File Processing Buffer Overflow	[+]
This reply has been minimised due to a negative Relevancy Score.

Secunia Advisory SA26806

Media Player Classic AVI File Processing Buffer Overflow

Do you have additional information related to this advisory?

You must be logged in to post a comment.

Secunia Customer Login

Not a customer already?