CVE-2007-6732

Опубликовано: 13 сент. 2009

Источник: nvd

CVSS2: 10

EPSS Низкий

Описание

Multiple buffer overflows in the dtt_load function in loaders/dtt_load.c Extended Module Player (XMP) 2.5.1 and earlier allow remote attackers to execute arbitrary code via unspecified vectors related to an untrusted length value and the (1) pofs and (2) plen arrays.

Ссылки

http://aluigi.altervista.org/adv/xmpbof-adv.txt
Exploit
http://www.securityfocus.com/bid/27047
Exploit
http://www.vupen.com/english/advisories/2008/0009
Vendor Advisory
http://aluigi.altervista.org/adv/xmpbof-adv.txt
Exploit
http://www.securityfocus.com/bid/27047
Exploit
http://www.vupen.com/english/advisories/2008/0009
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:claudio_matsuoka:extended_module_player:*:*:*:*:*:*:*:*

Версия до 2.5.1 (включая)

cpe:2.3:a:claudio_matsuoka:extended_module_player:2.2.0:*:*:*:*:*:*:*

cpe:2.3:a:claudio_matsuoka:extended_module_player:2.2.1:*:*:*:*:*:*:*

cpe:2.3:a:claudio_matsuoka:extended_module_player:2.3.0:*:*:*:*:*:*:*

cpe:2.3:a:claudio_matsuoka:extended_module_player:2.3.1:*:*:*:*:*:*:*

cpe:2.3:a:claudio_matsuoka:extended_module_player:2.3.2:*:*:*:*:*:*:*

cpe:2.3:a:claudio_matsuoka:extended_module_player:2.4.0:*:*:*:*:*:*:*

cpe:2.3:a:claudio_matsuoka:extended_module_player:2.4.1:*:*:*:*:*:*:*

cpe:2.3:a:claudio_matsuoka:extended_module_player:2.5.0:*:*:*:*:*:*:*

EPSS

Процентиль: 89%

0.04776

Низкий

10 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2007-6732

ubuntu

около 16 лет назад

CVE-2007-6732

redhat

почти 18 лет назад

CVE-2007-6732

debian

около 16 лет назад

Multiple buffer overflows in the dtt_load function in loaders/dtt_load ...

GHSA-3hmr-jrgj-vchc

github

больше 3 лет назад

EPSS

Процентиль: 89%

0.04776

Низкий

10 Critical

CVSS2

Дефекты

CWE-119