Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2007-6731
HistoryOct 03, 2022 - 4:14 p.m.

CVE-2007-6731

2022-10-0316:14:28
Debian Security Bug Tracker
security-tracker.debian.org
5
vulnerability
buffer overflow
xmp 2.5.1

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.248 Low

EPSS

Percentile

96.7%

Extended Module Player (XMP) 2.5.1 and earlier allow remote attackers to execute arbitrary code via an OXM file with a negative value, which bypasses a check in (1) test_oxm and (2) decrunch_oxm functions in misc/oxm.c, leading to a buffer overflow.

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.248 Low

EPSS

Percentile

96.7%