Unrated severityNVD Advisory· Published Sep 18, 2007· Updated Jun 16, 2026

CVE-2007-4938

Description

Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a .avi file with certain large "indx truck size" and nEntriesInuse values, and a certain wLongsPerEntry value.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

MPlayer/Mplayer2 versions
cpe:2.3:a:mplayer:mplayer:1.0_rc1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:mplayer:mplayer:1.0_rc1:*:*:*:*:*:*:*
- (no CPE)range: <=1.0rc1
Sgi/Irix
cpe:2.3:o:sgi:irix:*:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/25648nvdExploit
www.vulnhunt.com/advisories/CAL-20070912-1_Multiple_vendor_produce_handling_AVI_file_vulnerabilities.txtnvdExploit
secunia.com/advisories/27016nvdVendor Advisory
osvdb.org/45940nvd
securityreason.com/securityalert/3144nvd
www.mandriva.com/security/advisoriesnvd
www.securityfocus.com/archive/1/479222/100/0/threadednvd
exchange.xforce.ibmcloud.com/vulnerabilities/36581nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.013
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000