CVE-2007-6732: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in the dttload function in loaders/dttload.c Extended Module Player XMP 2.5.1 and earlier allow remote attackers to execute arbitrary code via unspecified vectors related to an untrusted length value and the 1 pofs and 2 plen arrays...