3ivx MPEG-4 < 5.0.2 Buffer Overflow
High Nessus Plugin ID 29749
SynopsisThe remote Windows host contains an application that is prone to a buffer overflow attack.
DescriptionThe 3ivx MPEG-4 compression suite is installed on the remote host. It contains an MP4 codec for use with media players such as Windows Media Player for creating and playing back MPEG-4 / MP4 files.
The version of this codec on the remote host is affected by a buffer overflow vulnerability. If an attacker can trick a user on the affected host into opening a specially crafted MP4 file with a media player that uses this codec, this issue could be leveraged to execute arbitrary code on the affected host subject to the user's privileges.
SolutionUpgrade to 3ivx MPEG-4 compression suite version 5.0.2 or later.