Extended Module Player (XMP) 2.5.1 and earlier allow remote attackers...

10 CVSS

Vulnerability Description

Extended Module Player (XMP) 2.5.1 and earlier allow remote attackers to execute arbitrary code via an OXM file with a negative value, which bypasses a check in (1) test_oxm and (2) decrunch_oxm functions in misc/oxm.c, leading to a buffer overflow.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-6731

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from claudio matsuoka

View All →

CVE-2007-6732

Multiple buffer overflows in the dtt_load function in loaders/dtt_load.c Extended...

Critical 10

Affected Vendor

claudio matsuoka

View all reports →

Affected Software

extended module player

Vulnerable Versions:

0, 2.2.0, 2.2.1, 2.3.0, 2.3.1, 2.3.2, 2.4.0, 2.4.1, 2.5.0

Timeline

Official Publish: September 13th, 2009

Last Modified: September 17th, 2024

Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.