CVE-2007-6732

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Multiple buffer overflows in the dtt_load function in loaders/dtt_load.c Extended Module Player (XMP) 2.5.1 and earlier allow remote attackers to execute arbitrary code via unspecified vectors related to an untrusted length value and the (1) pofs and (2) plen arrays.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://aluigi.altervista.org/adv/xmpbof-adv.txtExploit
http://www.securityfocus.com/bid/27047Exploit
http://www.vupen.com/english/advisories/2008/0009Vendor Advisory
http://aluigi.altervista.org/adv/xmpbof-adv.txtExploit
http://www.securityfocus.com/bid/27047Exploit
http://www.vupen.com/english/advisories/2008/0009Vendor Advisory

Timeline

Published: Sep 13, 2009
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2007

CVE-2007-67334.7The nfs_lock function in fs/nfs/file.c in the Linux kernel 2.6.9 does not properly remove POSIX locks on files that are setgid without group CVE-2007-67344.0NWFTPD.nlm before 5.08.07 in the FTP server in Novell NetWare 6.5 SP7 does not properly implement the FTPREST.TXT NOREMOTE restriction, whic CVE-2007-67357.5NWFTPD.nlm before 5.08.06 in the FTP server in Novell NetWare does not properly handle partial matches for container names in the FTPREST.TX CVE-2007-67366.5Multiple directory traversal vulnerabilities in FTPServer.py in pyftpdlib before 0.2.0 allow remote authenticated users to access arbitrary CVE-2007-67377.5FTPServer.py in pyftpdlib before 0.2.0 does not increment the attempted_logins count for a USER command that specifies an invalid username, CVE-2007-67385.0pyftpdlib before 0.1.1 does not choose a random value for the port associated with the PASV command, which makes it easier for remote attack CVE-2007-67395.0FTPServer.py in pyftpdlib before 0.2.0 allows remote attackers to cause a denial of service via a long command.CVE-2007-67404.0The ftp_STOU function in FTPServer.py in pyftpdlib before 0.2.0 does not limit the number of attempts to discover a unique filename, which m CVE-2007-67416.5The ftp_PORT function in FTPServer.py in pyftpdlib before 0.2.0 does not prevent TCP connections to privileged ports if the destination IP a CVE-2007-67426.8The get_filter_list function in IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-LA0006 does not properly perform certain sub f CVE-2007-67434.0Double free vulnerability in IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-LA0005 allows remote authenticated users to cause CVE-2007-67442.1Flexera Macrovision InstallShield before 2008 sends a digital-signature password to an unintended application during certain signature opera