CVE-2007-1246

The DMO_VideoDecoder_Open function in loader/dmo/DMO_VideoDecoder.c in MPlayer 1.0rc1 and earlier, as used in xine-lib, does not set the biSize before use in a memcpy, which allows user-assisted remote attackers to cause a buffer overflow and possibly execute arbitrary code, a different vulnerability than CVE-2007-1387.

Published: 2007-03-03 Last update: 2026-04-23 Assigner: [email protected] Source: [email protected]

Conclusion & alert: CVE-2007-1246 is rated Moderate Risk (63.1/100): CVSS High severity, with high exploitation likelihood (EPSS 9.30%, 92th percentile). Core evidence: EPSS ranks this CVE among the most likely to be exploited in the near term. Mandatory action: High exploitation likelihood—assess exposure and prioritize remediation.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Exploit prediction scoring system (EPSS) score for CVE-2007-1246

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2025-10-20 8.98% 9.30% +0.33%
2 2025-03-30 9.22% 8.98% -0.24%
3 2025-03-29 9.22%

Full EPSS history (14 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2007-1246

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
7.6 2.0 HIGH
AV:N/AC:H/Au:N/C:C/I:C/A:C Click to expand
Access vector (AV:N)
Can be exploited remotely over network reachability.
Access complexity (AC:H)
Exploitation requires uncommon or highly specific conditions.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:C)
Complete confidentiality impact.
Integrity impact (I:C)
Complete integrity impact.
Availability impact (A:C)
Complete availability impact.
4.9 10.0 [email protected]

Weakness enumeration for CVE-2007-1246

OS Trackers for CVE-2007-1246

vendor priority summary link
debian medium CVE-2007-1246 medium priority: Debian including 1 source packages (mplayer), 5 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): resolved 5. https://security-tracker.debian.org/tracker/CVE-2007-1246
gentoo normal CVE-2007-1246: 2 GLSA(s) (200704-09, 200705-21), 2 atom(s) (media-libs/xine-lib, media-video/mplayer); latest impact normal. https://bugs.gentoo.org/buglist.cgi?quicksearch=CVE-2007-1246
ubuntu medium CVE-2007-1246 medium priority: Ubuntu including 2 source packages (mplayer, xine-lib), 10 status rows across 5 suites (dapper, edgy, feisty, gutsy, upstream): released 8, needs-triage 1, not-affected 1. https://ubuntu.com/security/CVE-2007-1246

NVD evaluator notes for CVE-2007-1246

Impact: Failed exploit attempts will likely result in a denial-of-service condition.

Affected software / configurations for CVE-2007-1246

Vendor Product Version Raw CPE
mplayer mplayer <= 1.0_rc1 cpe:2.3:a:mplayer:mplayer:*:*:*:*:*:*:*:*

References for CVE-2007-1246

URL Tags
http://lists.grok.org.uk/pipermail/full-disclosure/2007-March/052738.html
http://secunia.com/advisories/24443 Vendor Advisory
http://secunia.com/advisories/24444 Vendor Advisory
http://secunia.com/advisories/24446 Vendor Advisory
http://secunia.com/advisories/24448 Vendor Advisory
http://secunia.com/advisories/24462 Vendor Advisory
http://secunia.com/advisories/24866 Vendor Advisory
http://secunia.com/advisories/24897 Vendor Advisory
http://secunia.com/advisories/24995 Vendor Advisory
http://secunia.com/advisories/25462 Vendor Advisory
http://secunia.com/advisories/29601 Vendor Advisory
http://security.gentoo.org/glsa/glsa-200704-09.xml
http://security.gentoo.org/glsa/glsa-200705-21.xml
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.449141
http://svn.mplayerhq.hu/mplayer/trunk/loader/dmo/DMO_VideoDecoder.c Patch
http://svn.mplayerhq.hu/mplayer/trunk/loader/dmo/DMO_VideoDecoder.c?r1=22019&r2=22204
http://www.debian.org/security/2008/dsa-1536
http://www.mandriva.com/security/advisories?name=MDKSA-2007:055
http://www.mandriva.com/security/advisories?name=MDKSA-2007:057
http://www.novell.com/linux/security/advisories/2007_007_suse.html
http://www.novell.com/linux/security/advisories/2007_5_sr.html
http://www.securityfocus.com/archive/1/466691/30/6900/threaded
http://www.securityfocus.com/bid/22771
http://www.ubuntu.com/usn/usn-433-1
http://www.vupen.com/english/advisories/2007/0794 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/32747
cvelogic Threat Intelligence