CVE-2007-4941

CVE-2007-4941 describes a denial-of-service vulnerability in KMPlayer versions 2.9.3.1210 and earlier. Remote attackers can exploit this by crafting malicious .avi files with specific large "indx truck size" and nEntriesInuse values, leading to high CPU consumption on the victim's system. This vulnerability carries a CVSS score of 7.1, indicating high severity with a network-based attack vector and medium complexity, resulting in a complete denial of service. While no Metasploit or Nuclei exploits are publicly available, an ExploitDB entry (EDB-30580) confirms the existence of exploit code for multiple denial-of-service vulnerabilities in a slightly newer version. Despite its age and the availability of exploit code, there is no evidence of active exploitation, and it lacks significant community discussion or media coverage.