Check Point Advisories

3ivx MPEG-4 MP4 File Handling Stack Overflow - Specific (CVE-2007-6401)

Vulnerability
Protection

Check Point Reference:	CPAI-2013-1268
Date Published:	17 Feb 2013
Severity:	Medium
Last Updated:	Friday 19 April, 2024
Source:	CVE-2007-6401
Protection Provided by:	Security Gateway R75
Who is Vulnerable?	MPEG-4 Part 14
Vulnerability Description	There exists a buffer overflow vulnerability in 3ivx MPEG-4. Specifically, the vulnerability is due to improper handling of MP4 files by the 3ivx MPEG-4 codec plugin. A remote attacker can exploit this vulnerability by enticing the target user to open crafted MP4 file, potentially causing arbitrary code to be injected and executed in the security context of the currently logged in user. In a simple attack case, the affected media player application may terminate when the malicious file is opened.In a sophisticated attack scenario, where the malicious user is successful in injecting and executing supplied code, the behaviour of the system is dependent on the nature of the injected code. Any code injected into the vulnerable component would execute in the security context of the currently logged in user.

Protection Overview

This protection will detect and block attempts to exploit this vulnerability.

In order for the protection to be activated, update your product to the latest update. For information on how to update , go to SBP-2006-05, Protection tab and select the version of your choice.

Security Gateway R75 / R71 / R70

In the IPS tab, click Protections and find the 3ivx MPEG-4 MP4 File Handling Stack Overflow - Specific protection using the Search tool and Edit the protection's settings.
Install policy on all modules.

SmartView Tracker will log the following entries:
Attack Name: Content Protection Violation
Attack Information: 3ivx MPEG-4 MP4 File Handling Stack Overflow - Specific