Buffer overflow in Claudio Matsuoka Extended Module Player

CVE-2007-6732

Multiple buffer overflows in the dtt_load function in loaders/dtt_load.c Extended Module Player (XMP) 2.5.1 and earlier allow remote attackers to execute arbitrary code via unspecified vectors related to an untrusted length value and the (1) pofs and (2) plen arrays.

Vulnerability class: Buffer Overflow

EPSS: 0.056 (92.1th percentile) — read the EPSS interpretation.

Affected products

Claudio_matsuoka Extended_module_player — versions 2.2.0, 2.2.1, 2.3.0
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

cve@mitre.org (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
cve@mitre.org (Exploit, x_refsource_MISC)
cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)