Lucene search

K
ubuntucveUbuntu.comUB:CVE-2007-6731
HistorySep 13, 2009 - 12:00 a.m.

CVE-2007-6731

2009-09-1300:00:00
ubuntu.com
ubuntu.com
7

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.248 Low

EPSS

Percentile

96.7%

Extended Module Player (XMP) 2.5.1 and earlier allow remote attackers to
execute arbitrary code via an OXM file with a negative value, which
bypasses a check in (1) test_oxm and (2) decrunch_oxm functions in
misc/oxm.c, leading to a buffer overflow.

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.248 Low

EPSS

Percentile

96.7%