CVE-2007-6732 Multiple buffer overflows in the dtt_load function in loaders/dtt_load.c Extended Module Player (XMP) 2.5.1 and earlier allow remote attackers to execute arbitrary code via unspecified vectors related...
HighCVSS 10.0
EPSS 5.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple buffer overflows in the dtt_load function in loaders/dtt_load.c Extended Module Player (XMP) 2.5.1 and earlier allow remote attackers to execute arbitrary code via unspecified vectors related to an untrusted length value and the (1) pofs and (2) plen arrays.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| claudio matsuoka extended module player | <= 2.5.1 | No fix listed |
| claudio matsuoka extended module player | = 2.2.0 | No fix listed |
| claudio matsuoka extended module player | = 2.2.1 | No fix listed |
| claudio matsuoka extended module player | = 2.3.0 | No fix listed |
| claudio matsuoka extended module player | = 2.3.1 | No fix listed |
| claudio matsuoka extended module player | = 2.3.2 | No fix listed |
| claudio matsuoka extended module player | = 2.4.0 | No fix listed |
| claudio matsuoka extended module player | = 2.4.1 | No fix listed |
| claudio matsuoka extended module player | = 2.5.0 | No fix listed |
| debian/xmp(Debian:12) | < 2.6.1-1 | 2.6.1-1 |
| debian/xmp(Debian:13) | < 2.6.1-1 | 2.6.1-1 |
| debian/xmp(Debian:14) | < 2.6.1-1 | 2.6.1-1 |
References
- aluigi.altervista.org exploit
- 27047 exploit vdb-entry
- ADV-2008-0009 vdb-entry vendor-advisory
- Debian Security Tracker CVE-2007-6732 vendor-advisory
- bugs.debian.org issue-tracking