CVE-2007-6731

2022-10-0316:14:28

CWE-94

[email protected]

web.nvd.nist.gov

cve-2007-6731

extended module player

xmp

buffer overflow

oxm file

security vulnerability

code execution

remote attack

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

Low

0.248 Low

EPSS

Percentile

96.7%

JSON

Extended Module Player (XMP) 2.5.1 and earlier allow remote attackers to execute arbitrary code via an OXM file with a negative value, which bypasses a check in (1) test_oxm and (2) decrunch_oxm functions in misc/oxm.c, leading to a buffer overflow.

Affected configurations

NVD

Node

claudio_matsuokaextended_module_playerRange≤2.5.1

claudio_matsuokaextended_module_playerMatch2.2.0

claudio_matsuokaextended_module_playerMatch2.2.1

claudio_matsuokaextended_module_playerMatch2.3.0

claudio_matsuokaextended_module_playerMatch2.3.1

claudio_matsuokaextended_module_playerMatch2.3.2

claudio_matsuokaextended_module_playerMatch2.4.0

claudio_matsuokaextended_module_playerMatch2.4.1

claudio_matsuokaextended_module_playerMatch2.5.0

CPENameOperatorVersion
claudio_matsuoka:extended_module_playerclaudio matsuoka extended module playerle2.5.1
claudio_matsuoka:extended_module_playerclaudio matsuoka extended module playereq2.2.0
claudio_matsuoka:extended_module_playerclaudio matsuoka extended module playereq2.2.1
claudio_matsuoka:extended_module_playerclaudio matsuoka extended module playereq2.3.0
claudio_matsuoka:extended_module_playerclaudio matsuoka extended module playereq2.3.1
claudio_matsuoka:extended_module_playerclaudio matsuoka extended module playereq2.3.2
claudio_matsuoka:extended_module_playerclaudio matsuoka extended module playereq2.4.0
claudio_matsuoka:extended_module_playerclaudio matsuoka extended module playereq2.4.1
claudio_matsuoka:extended_module_playerclaudio matsuoka extended module playereq2.5.0

CPE	Name	Operator	Version
claudio_matsuoka:extended_module_player	claudio matsuoka extended module player	le	2.5.1
claudio_matsuoka:extended_module_player	claudio matsuoka extended module player	eq	2.2.0
claudio_matsuoka:extended_module_player	claudio matsuoka extended module player	eq	2.2.1
claudio_matsuoka:extended_module_player	claudio matsuoka extended module player	eq	2.3.0
claudio_matsuoka:extended_module_player	claudio matsuoka extended module player	eq	2.3.1
claudio_matsuoka:extended_module_player	claudio matsuoka extended module player	eq	2.3.2
claudio_matsuoka:extended_module_player	claudio matsuoka extended module player	eq	2.4.0
claudio_matsuoka:extended_module_player	claudio matsuoka extended module player	eq	2.4.1
claudio_matsuoka:extended_module_player	claudio matsuoka extended module player	eq	2.5.0