CVE-2007-4938

no score yetEPSS 16%

No CVSS score yet. EPSS 16% chance of exploitation in the next 30 days.

Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a .avi file with certain large "indx truck size" and nEntriesInuse values, and a certain wLongsPerEntry value.

EPSS: 16% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2007-09-18
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

mplayer:mplayer
sgi:irix

References

http://osvdb.org/45940
http://secunia.com/advisories/27016
http://securityreason.com/securityalert/3144
http://www.mandriva.com/security/advisories?name=MDKSA-2007:192
http://www.securityfocus.com/archive/1/479222/100/0/threaded

Check your stack JSON