CVE-2007-6731
high · 10Extended Module Player (XMP) 2.5.1 and earlier allow remote attackers to execute arbitrary code via an OXM file with a negative value, which bypasses a check in (1) test_oxm and (2) decrunch_oxm functions in misc/oxm.c, leading to a buffer overflow.
10
CVSS
14.1%
EPSS (exploit prob.)
96th
EPSS percentile
2009-09-13
Published
AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-94
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| claudio_matsuoka | extended_module_player | <= 2.5.1 |
| claudio_matsuoka | extended_module_player | 2.2.0 |
| claudio_matsuoka | extended_module_player | 2.2.1 |
| claudio_matsuoka | extended_module_player | 2.3.0 |
| claudio_matsuoka | extended_module_player | 2.3.1 |
| claudio_matsuoka | extended_module_player | 2.3.2 |
| claudio_matsuoka | extended_module_player | 2.4.0 |
| claudio_matsuoka | extended_module_player | 2.4.1 |
| claudio_matsuoka | extended_module_player | 2.5.0 |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2007-6731