CVE-2007-1387

Publication date 13 March 2007

Last updated 24 July 2024

Ubuntu priority

Unknown

Why this priority?

The DirectShow loader (loader/dshow/DS_VideoDecoder.c) in MPlayer 1.0rc1 and earlier, as used in xine-lib, does not set the biSize before use in a memcpy, which allows user-assisted remote attackers to cause a buffer overflow and possibly execute arbitrary code, a different vulnerability than CVE-2007-1246.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
xine-lib 7.04 feisty
Not affected
6.10 edgy
Fixed 1.1.2+repacked1-0ubuntu3.4
6.06 LTS dapper
Fixed 1.1.1+ubuntu2-7.7

References

Related Ubuntu Security Notices (USN)

Other references