3ivx MPEG-4 < 5.0.2 Buffer Overflow

high Nessus Plugin ID 29749

Synopsis

The remote Windows host contains an application that is prone to a buffer overflow attack.

Description

The 3ivx MPEG-4 compression suite is installed on the remote host. It contains an MP4 codec for use with media players such as Windows Media Player for creating and playing back MPEG-4 / MP4 files.

The version of this codec on the remote host is affected by a buffer overflow vulnerability. If an attacker can trick a user on the affected host into opening a specially crafted MP4 file with a media player that uses this codec, this issue could be leveraged to execute arbitrary code on the affected host subject to the user's privileges.

Solution

Upgrade to 3ivx MPEG-4 compression suite version 5.0.2 or later.

Plugin Details

Severity: High

ID: 29749

File Name: 3ivx_mpeg4_502.nasl

Version: 1.15

Type: local

Agent: windows

Family: Windows

Published: 12/24/2007

Updated: 11/15/2018

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: High

Base Score: 9.3

Temporal Score: 7.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Information

Required KB Items: SMB/Registry/Enumerated

Exploit Available: true

Exploit Ease: Exploits are available

Reference Information

CVE: CVE-2007-6401, CVE-2007-6402

BID: 26773

CWE: 119

Detections

Analytics