CVE-2007-6732

2022-10-0316:14:27

CWE-119

[email protected]

web.nvd.nist.gov

buffer overflow

dtt_load

xmp

code execution

remote attackers

cve-2007-6732

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

Low

0.044 Low

EPSS

Percentile

92.5%

JSON

Multiple buffer overflows in the dtt_load function in loaders/dtt_load.c Extended Module Player (XMP) 2.5.1 and earlier allow remote attackers to execute arbitrary code via unspecified vectors related to an untrusted length value and the (1) pofs and (2) plen arrays.

Affected configurations

NVD

Node

claudio_matsuokaextended_module_playerRange≤2.5.1

claudio_matsuokaextended_module_playerMatch2.2.0

claudio_matsuokaextended_module_playerMatch2.2.1

claudio_matsuokaextended_module_playerMatch2.3.0

claudio_matsuokaextended_module_playerMatch2.3.1

claudio_matsuokaextended_module_playerMatch2.3.2

claudio_matsuokaextended_module_playerMatch2.4.0

claudio_matsuokaextended_module_playerMatch2.4.1

claudio_matsuokaextended_module_playerMatch2.5.0

CPENameOperatorVersion
claudio_matsuoka:extended_module_playerclaudio matsuoka extended module playerle2.5.1
claudio_matsuoka:extended_module_playerclaudio matsuoka extended module playereq2.2.0
claudio_matsuoka:extended_module_playerclaudio matsuoka extended module playereq2.2.1
claudio_matsuoka:extended_module_playerclaudio matsuoka extended module playereq2.3.0
claudio_matsuoka:extended_module_playerclaudio matsuoka extended module playereq2.3.1
claudio_matsuoka:extended_module_playerclaudio matsuoka extended module playereq2.3.2
claudio_matsuoka:extended_module_playerclaudio matsuoka extended module playereq2.4.0
claudio_matsuoka:extended_module_playerclaudio matsuoka extended module playereq2.4.1
claudio_matsuoka:extended_module_playerclaudio matsuoka extended module playereq2.5.0

CPE	Name	Operator	Version
claudio_matsuoka:extended_module_player	claudio matsuoka extended module player	le	2.5.1
claudio_matsuoka:extended_module_player	claudio matsuoka extended module player	eq	2.2.0
claudio_matsuoka:extended_module_player	claudio matsuoka extended module player	eq	2.2.1
claudio_matsuoka:extended_module_player	claudio matsuoka extended module player	eq	2.3.0
claudio_matsuoka:extended_module_player	claudio matsuoka extended module player	eq	2.3.1
claudio_matsuoka:extended_module_player	claudio matsuoka extended module player	eq	2.3.2
claudio_matsuoka:extended_module_player	claudio matsuoka extended module player	eq	2.4.0
claudio_matsuoka:extended_module_player	claudio matsuoka extended module player	eq	2.4.1
claudio_matsuoka:extended_module_player	claudio matsuoka extended module player	eq	2.5.0