Search for vulnerabilities
Vulnerability details: VCID-9cw5-dqm6-aaak
Vulnerability ID VCID-9cw5-dqm6-aaak
Aliases CVE-2007-1246
Summary The DMO_VideoDecoder_Open function in loader/dmo/DMO_VideoDecoder.c in MPlayer 1.0rc1 and earlier, as used in xine-lib, does not set the biSize before use in a memcpy, which allows user-assisted remote attackers to cause a buffer overflow and possibly execute arbitrary code, a different vulnerability than CVE-2007-1387.
Status Published
Exploitability 0.5
Weighted Severity 6.8
Risk 3.4
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
System Score Found at
epss 0.08976 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.08976 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.08976 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.08976 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.08976 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.08976 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.08976 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.08976 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.08976 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.08976 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.08976 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.08976 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.08976 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.08976 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.08976 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.08976 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.08976 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.08976 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.08976 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.08976 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.08976 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.08976 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.08976 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.08976 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.08976 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.08976 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.08976 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.08976 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.08976 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.08976 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.08976 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.08976 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.08976 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.08976 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.08976 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.08976 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.08976 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.08976 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.08976 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.08976 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.08976 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.08976 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.08976 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.08976 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.08976 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.08976 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.08976 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.08976 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.08976 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.0922 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.27966 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.27966 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.27966 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.27966 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.33913 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.33913 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.33913 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.33913 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.33913 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.33913 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.33913 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.33913 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.33913 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.33913 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
epss 0.33913 https://api.first.org/data/v1/epss?cve=CVE-2007-1246
cvssv2 7.6 https://nvd.nist.gov/vuln/detail/CVE-2007-1246
Reference id Reference type URL
http://lists.grok.org.uk/pipermail/full-disclosure/2007-March/052738.html
https://api.first.org/data/v1/epss?cve=CVE-2007-1246
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1246
http://secunia.com/advisories/24443
http://secunia.com/advisories/24444
http://secunia.com/advisories/24446
http://secunia.com/advisories/24448
http://secunia.com/advisories/24462
http://secunia.com/advisories/24866
http://secunia.com/advisories/24897
http://secunia.com/advisories/24995
http://secunia.com/advisories/25462
http://secunia.com/advisories/29601
http://security.gentoo.org/glsa/glsa-200704-09.xml
http://security.gentoo.org/glsa/glsa-200705-21.xml
https://exchange.xforce.ibmcloud.com/vulnerabilities/32747
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.449141
http://svn.mplayerhq.hu/mplayer/trunk/loader/dmo/DMO_VideoDecoder.c
http://svn.mplayerhq.hu/mplayer/trunk/loader/dmo/DMO_VideoDecoder.c?r1=22019&r2=22204
http://www.debian.org/security/2008/dsa-1536
http://www.mandriva.com/security/advisories?name=MDKSA-2007:055
http://www.mandriva.com/security/advisories?name=MDKSA-2007:057
http://www.novell.com/linux/security/advisories/2007_007_suse.html
http://www.novell.com/linux/security/advisories/2007_5_sr.html
http://www.securityfocus.com/archive/1/466691/30/6900/threaded
http://www.securityfocus.com/bid/22771
http://www.ubuntu.com/usn/usn-433-1
http://www.vupen.com/english/advisories/2007/0794
414072 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=414072
cpe:2.3:a:mplayer:mplayer:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mplayer:mplayer:*:*:*:*:*:*:*:*
CVE-2007-1246 https://nvd.nist.gov/vuln/detail/CVE-2007-1246
GLSA-200704-09 https://security.gentoo.org/glsa/200704-09
GLSA-200705-21 https://security.gentoo.org/glsa/200705-21
USN-433-1 https://usn.ubuntu.com/433-1/
No exploits are available.
Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C Found at https://nvd.nist.gov/vuln/detail/CVE-2007-1246
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.91821
EPSS Score 0.08976
Published At March 28, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
There are no relevant records.